Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2003-1009

Quick assessment

Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Mac OS X是一款使用在Mac机器上的操作系统，基于BSD系统。 Mac OS X系统在处理DHCP应答时存在问题，远程攻击者可以利用这个漏洞以ROOT权限访问受影响系统。 默认情况下，受此漏洞影响的Mac OS X系统会尝试在所有可用接口上进行DHCP协商。即使在Airport卡安装在系统上，但附近没有网络，也会默认关联任何网络并使用DHCP获得地址。如果可连接一DHCP或者NetInfo服务器，系统也会使用它们提供DHCP提供的字段。 在受此漏洞影响的系统上"Directory Access"默认

AI Predicted 7.5 Difficulty: Hard EPSS 4.57% · P91
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2003-1009

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Directory Services in Apple Mac OS X 10.0.2, 10.0.3, 10.2.8, 10.3.2 and Apple Mac OS X Server 10.2 through 10.3.2 accepts authentication server information from unknown LDAP or NetInfo sources as provided by a malicious DHCP server, which allows remote attackers to gain privileges.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Apple MacOS X DHCP应答ROOT权限访问漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Mac OS X是一款使用在Mac机器上的操作系统，基于BSD系统。 Mac OS X系统在处理DHCP应答时存在问题，远程攻击者可以利用这个漏洞以ROOT权限访问受影响系统。 默认情况下，受此漏洞影响的Mac OS X系统会尝试在所有可用接口上进行DHCP协商。即使在Airport卡安装在系统上，但附近没有网络，也会默认关联任何网络并使用DHCP获得地址。如果可连接一DHCP或者NetInfo服务器，系统也会使用它们提供DHCP提供的字段。 在受此漏洞影响的系统上"Directory Access"默认
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2003-1009

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2003-1009

请登录查看更多情报信息。

Vendor Advisories for CVE-2003-1009 (2)

Other References for CVE-2003-1009 (3)

Same Patch Batch · n/a · 2004-03-10 · 16 CVEs total

CVE-2003-0170 IBM FTP守护程序Kerberos 5未名管理员访问漏洞
CVE-2003-0444 GTKSee PNG图象装载操作堆破坏漏洞
CVE-2003-0601 Apple Mac OS X Server Workgroup Manager不安全帐户建立漏洞
CVE-2003-0607 XConq多个环境变量缓冲区溢出漏洞
CVE-2003-0612 Lim Unlimited Crafty命令行本地缓冲区溢出漏洞
CVE-2003-0796 SGI rpc.mountd未授权挂接分区漏洞
CVE-2003-0797 SGI rpc.mountd未明远程拒绝服务攻击漏洞
CVE-2003-0828 freesweep环境变量处理本地缓冲区溢出漏洞
CVE-2003-1006 MacOSX CD9660.Util探测挂接设备参数本地缓冲区溢出漏洞
CVE-2003-1007 Apple MacOS X AppleFileServer未明安全漏洞
CVE-2003-1008 Mac OS X 未知漏洞
CVE-2003-1010 Apple MacOS X fs_usage未明本地权限提升漏洞
CVE-2003-1011 MacOS X本地root用户权限提升漏洞
CVE-2003-1018 IBM AIX enq本地格式串处理漏洞
CVE-2004-0158 LGames LBreakout2多个环境变量缓冲区溢出漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2003-1009

No comments yet

Leave a comment