CVE-2003-0804: Medium severity Apple iOS and macOS vulnerability
The arplookup function in FreeBSD 5.1 and earlier, Mac OS X before 10.2.8, and possibly other BSD-based systems, allows remote attackers on a local subnet to cause a denial of service (resource starvation and panic) via a flood of spoofed ARP requests.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2003-0804?
The severity of CVE-2003-0804 is considered moderate, primarily because it facilitates a denial of service attack.
How do I fix CVE-2003-0804?
To mitigate CVE-2003-0804, update to the latest versions of FreeBSD or Mac OS X that contain the necessary security patches.
What systems are affected by CVE-2003-0804?
CVE-2003-0804 affects FreeBSD 5.1 and earlier, and various versions of Mac OS X prior to 10.2.8.
What type of attack does CVE-2003-0804 enable?
CVE-2003-0804 enables remote attackers to carry out denial of service attacks via spoofed ARP requests.
Is CVE-2003-0804 likely to be exploited?
Given the nature of the vulnerability and its denial of service capabilities, CVE-2003-0804 is likely to be exploited in localized network environments.