CVE-2003-1009: Critical severity Apple Mac OS X Server vulnerability

Published Mar 10, 2004

Updated

Directory Services in Apple Mac OS X 10.0.2, 10.0.3, 10.2.8, 10.3.2 and Apple Mac OS X Server 10.2 through 10.3.2 accepts authentication server information from unknown LDAP or NetInfo sources as provided by a malicious DHCP server, which allows remote attackers to gain privileges.

Affected Software

16 affected components

Apple Mac OS X Server=10.3.2

Apple Mac OS X Server=10.2.2

Apple iOS and macOS=10.0.2

Apple iOS and macOS=10.2.8

Apple Mac OS X Server=10.2.4

Apple Mac OS X Server=10.2.7

Apple Mac OS X Server=10.2.3

Apple iOS and macOS=10.0.3

Apple iOS and macOS=10.3.2

Apple Mac OS X Server=10.2.5

Apple Mac OS X Server=10.2.6

Apple Mac OS X Server=10.2.1

Apple Mac OS X Server=10.3

Apple Mac OS X Server=10.3.1

Apple Mac OS X Server=10.2

Apple Mac OS X Server=10.2.8

Remediation

Patch Available

http://docs.info.apple.com/article.html?artnum=61798

Event History

Mar 10, 2004

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2003-1009?

CVE-2003-1009 has a high severity level as it allows remote attackers to gain privileges.

How do I fix CVE-2003-1009?

To fix CVE-2003-1009, you should update your Apple Mac OS X or Mac OS X Server to the latest available version that addresses this vulnerability.

What systems are affected by CVE-2003-1009?

CVE-2003-1009 affects Apple Mac OS X versions 10.0.2, 10.0.3, 10.2.8, 10.3.2 and various versions of Apple Mac OS X Server.

What type of attack does CVE-2003-1009 expose systems to?

CVE-2003-1009 exposes systems to potential privilege escalation attacks through malicious DHCP server configurations.

Can CVE-2003-1009 be exploited remotely?

Yes, CVE-2003-1009 can be exploited remotely by attackers using spoofed LDAP or NetInfo sources.