CVE-2003-0882: Apple Mac OS X

Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.

Mac OS X before 10.3 initializes the TCP timestamp with a constant number, which allows remote attackers to determine the system's uptime via the ID field in a TCP packet.

Affected products

• Apple Mac OS X: up to and including 10.3

Published 2003-11-03. Last modified 2026-06-16.