CVE-2003-0601
Workgroup Manager in Apple Mac OS X Server 10.2 through 10.2.6 does not disable a password for a...
Workgroup Manager in Apple Mac OS X Server 10.2 through 10.2.6 does not disable a password for a new account before it is saved for the first time, which allows remote attackers to gain unauthorized access via the new account before it is saved.
Exploit likelihood
What each source reports
NVD Score used
Workgroup Manager in Apple Mac OS X Server 10.2 through 10.2.6 does not disable a password for a new account before it is saved for the first time, which allows remote attackers to gain unauthorized access via the new account before it is saved.
- Record
CVE-2003-0601- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Workgroup Manager in Apple Mac OS X Server 10.2 through 10.2.6 does not disable a password for a new account before it is saved for the first time, which allows remote attackers to gain unauthorized access via the new account before it is saved.
- Record
CVE-2003-0601- Updated
- 2026-11-02
EUVDEUVD-2003-0595 No score
Workgroup Manager in Apple Mac OS X Server 10.2 through 10.2.6 does not disable a password for a new account before it is saved for the first time, which allows remote attackers to gain unauthorized access via the new account before it is saved.
- Record
EUVD-2003-0595- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4w8h-2hjm-3r6x No score
Workgroup Manager in Apple Mac OS X Server 10.2 through 10.2.6 does not disable a password for a...
Workgroup Manager in Apple Mac OS X Server 10.2 through 10.2.6 does not disable a password for a new account before it is saved for the first time, which allows remote attackers to gain unauthorized access via the new account before it is saved.
- Record
GHSA-4w8h-2hjm-3r6x- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2003-0601 is a high vulnerability (CVSS 7.5) in Apple Mac Os X Server, published March 10, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.50%, the 74th percentile. No source names a fixed version.