CVE-2003-0882

Name: CVE-2003-0882
Creator: NVD / NIST
Published: 2003-11-03T05:00:00+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 1.16%

Last modified Jun 16, 2026

CVE-2003-0882 is a vulnerability of currently unknown severity. Mac OS X before 10.3 initializes the TCP timestamp with a constant number, which allows remote attackers to determine the system's uptime via the ID field in a TCP packet.. EPSS estimates a 1.16% chance of exploitation in the next 30 days.

Description

Mac OS X before 10.3 initializes the TCP timestamp with a constant number, which allows remote attackers to determine the system's uptime via the ID field in a TCP packet.

Metrics

EPSS Probability

1.16%

63.1th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Vendor	Product	Versions
Apple	Mac Os X	<= 10.3

References

http://docs.info.apple.com/article.html?artnum=61798Patch, Vendor Advisory
http://lists.apple.com/mhonarc/security-announce/msg00038.html
http://docs.info.apple.com/article.html?artnum=61798Patch, Vendor Advisory
http://lists.apple.com/mhonarc/security-announce/msg00038.html

Timeline

Published: Nov 3, 2003
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2003-0882?

Mac OS X before 10.3 initializes the TCP timestamp with a constant number, which allows remote attackers to determine the system's uptime via the ID field in a TCP packet.

How severe is CVE-2003-0882?

Severity scoring for CVE-2003-0882 is pending analysis. The EPSS model estimates a 1.16% probability of exploitation in the next 30 days.

How do I fix CVE-2003-0882?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2003-0882?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST