CVE-2003-0882: Medium severity Apple iOS and macOS vulnerability
Published Oct 30, 2003
·Updated
Mac OS X before 10.3 initializes the TCP timestamp with a constant number, which allows remote attackers to determine the system's uptime via the ID field in a TCP packet.
Affected Software
1 affected component
Apple iOS and macOS<=10.3
Remediation
Patch Available
Event History
Oct 30, 2003
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Nov 3, 2003
Data Sourced
via NVD·05:00 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2003-0882?
CVE-2003-0882 has been classified as a medium severity vulnerability due to the potential exposure of system uptime information.
2
How do I fix CVE-2003-0882?
To fix CVE-2003-0882, update your Mac OS X to version 10.3 or later to ensure secure TCP timestamp handling.
3
What type of attack does CVE-2003-0882 allow?
CVE-2003-0882 allows remote attackers to infer system uptime through analysis of the TCP timestamp ID field.
4
Which versions of Mac OS X are affected by CVE-2003-0882?
CVE-2003-0882 affects Mac OS X versions prior to 10.3.
5
Can CVE-2003-0882 be exploited remotely?
Yes, CVE-2003-0882 can be exploited remotely by attackers observing TCP traffic to determine system uptime.