Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.2
CVSSv2

CVE-2007-0753

Published: 24/05/2007 Updated: 16/10/2018
CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9
VMScore: 730
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Subscribe to Mac Os X

Vulnerability Summary

Format string vulnerability in the VPN daemon (vpnd) in Apple Mac OS X 10.3.9 and 10.4.9 allows local users to execute arbitrary code via the -i parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

apple mac os x 10.3.3

apple mac os x 10.3.4

apple mac os x 10.4.1

apple mac os x 10.4.2

apple mac os x server 10.3

apple mac os x server 10.3.1

apple mac os x server 10.3.8

apple mac os x server 10.3.9

apple mac os x server 10.4.6

apple mac os x server 10.4.7

apple mac os x 10.3.1

apple mac os x 10.3.2

apple mac os x 10.3.9

apple mac os x 10.4

apple mac os x 10.4.8

apple mac os x 10.4.9

apple mac os x server 10.3.6

apple mac os x server 10.3.7

apple mac os x server 10.4.4

apple mac os x server 10.4.5

apple mac os x 10.3

apple mac os x 10.3.7

apple mac os x 10.3.8

apple mac os x 10.4.5

apple mac os x 10.4.6

apple mac os x 10.4.7

apple mac os x server 10.3.4

apple mac os x server 10.3.5

apple mac os x server 10.4.2

apple mac os x server 10.4.3

apple mac os x 10.3.5

apple mac os x 10.3.6

apple mac os x 10.4.3

apple mac os x 10.4.4

apple mac os x server 10.3.2

apple mac os x server 10.3.3

apple mac os x server 10.4

apple mac os x server 10.4.1

apple mac os x server 10.4.8

apple mac os x server 10.4.9

Exploits

Exploit DB: Apple Mac OSX 10.4.9 - VPND Local Format String
source: wwwsecurityfocuscom/bid/24208/info Apple Mac OS X's VPN service daemon is prone to a format-string vulnerability because it fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function Attackers may exploit this issue to crash the application or execute arbitrary code ...
Exploit DB: Apple Mac OSX < 2007-005 - 'vpnd' Local Privilege Escalation
# Copyright (c) 2007 Kevin Finisterre &lt;kf_lists [at] digitalmunitioncom&gt; # # CVE-ID: CVE-2007-0753 - docsinfoapplecom/articlehtml?artnum=305530 githubcom/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/4013targz (05302007-vpenistargz) # milw0rmcom [2007-05-30] ...

References

CWE-134http://lists.apple.com/archives/security-announce/2007/May/msg00004.htmlhttp://docs.info.apple.com/article.html?artnum=305530http://www.securityfocus.com/bid/24144http://www.securityfocus.com/bid/24208http://www.osvdb.org/35143http://www.securitytracker.com/id?1018125http://secunia.com/advisories/25402http://www.vupen.com/english/advisories/2007/1939https://exchange.xforce.ibmcloud.com/vulnerabilities/34505http://www.securityfocus.com/archive/1/469889/100/0/threadedhttp://www.securityfocus.com/archive/1/469882/100/0/threadedhttps://nvd.nist.govhttps://www.exploit-db.com/exploits/30096/
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook