CVE-2003-0601: Apple Mac OS X Server

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

Workgroup Manager in Apple Mac OS X Server 10.2 through 10.2.6 does not disable a password for a new account before it is saved for the first time, which allows remote attackers to gain unauthorized access via the new account before it is saved.

Affected products

• Apple Mac OS X Server: version 10.2 only; version 10.2.1 only; version 10.2.2 only; version 10.2.3 only; version 10.2.4 only; version 10.2.5 only; …

Published 2004-03-29. Last modified 2026-06-16.