Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2003-1009

Directory Services in Apple Mac OS X 10.0.2, 10.0.3, 10.2.8, 10.3.2 and Apple Mac OS X Server 10.2 through 10.3.2 accepts authentication server information from unknown LDAP or NetInfo sources as provided by a malicious DHCP server, which allows remote attackers to gain privileges.

  • Published: Mar 29, 2004
  • Updated: Apr 13, 2023
  • CVE: CVE-2003-1009
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 10
  • AV:N/AC:L/Au:N/C:C/I:C/A:C

No CWE or OWASP classifications available.

Software From Fixed in
apple / mac_os_x_server 10.3.2 10.3.2.x
apple / mac_os_x_server 10.2.2 10.2.2.x
apple / mac_os_x 10.0.2 10.0.2.x
apple / mac_os_x 10.2.8 10.2.8.x
apple / mac_os_x_server 10.2.4 10.2.4.x
apple / mac_os_x_server 10.2.7 10.2.7.x
apple / mac_os_x_server 10.2.3 10.2.3.x
apple / mac_os_x 10.0.3 10.0.3.x
apple / mac_os_x 10.3.2 10.3.2.x
apple / mac_os_x_server 10.2.5 10.2.5.x
apple / mac_os_x_server 10.2.6 10.2.6.x
apple / mac_os_x_server 10.2.1 10.2.1.x
apple / mac_os_x_server 10.3 10.3.x
apple / mac_os_x_server 10.3.1 10.3.1.x
apple / mac_os_x_server 10.2 10.2.x
apple / mac_os_x_server 10.2.8 10.2.8.x