CVE-2003-0882

Mac OS X before 10.3 initializes the TCP timestamp with a constant number, which allows remote attackers to determine the system's uptime via the ID field in a TCP packet.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2003-11-03

Last modified

2024-08-08

Affected products

• Mac Os X (Apple)

References

• http://docs.info.apple.com/article.html?artnum=61798
• http://lists.apple.com/mhonarc/security-announce/msg00038.html