CVE-2007-0753

Published: May 24, 2007Modified: Apr 23, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

Format string vulnerability in the VPN daemon (vpnd) in Apple Mac OS X 10.3.9 and 10.4.9 allows local users to execute arbitrary code via the -i parameter.

Affected (40)

Products: Apple: Mac Os X, Mac Os X Server

2 products

Mac Os X Server

Configuration A

40 vulnerable

Vulnerable Software	Affected Versions
Apple Mac Os X	Version 10.3.1
Apple Mac Os X	Version 10.3.2
Apple Mac Os X	Version 10.3.3
Apple Mac Os X	Version 10.3.4
Apple Mac Os X	Version 10.3.5
Apple Mac Os X	Version 10.3.6
Apple Mac Os X	Version 10.3.7
Apple Mac Os X	Version 10.3.8
Apple Mac Os X	Version 10.3.9
Apple Mac Os X	Version 10.3
Apple Mac Os X	Version 10.4.1
Apple Mac Os X	Version 10.4.2
Apple Mac Os X	Version 10.4.3
Apple Mac Os X	Version 10.4.4
Apple Mac Os X	Version 10.4.5
Apple Mac Os X	Version 10.4.6
Apple Mac Os X	Version 10.4.7
Apple Mac Os X	Version 10.4.8
Apple Mac Os X	Version 10.4.9
Apple Mac Os X	Version 10.4
Apple Mac Os X Server	Version 10.3.1
Apple Mac Os X Server	Version 10.3.2
Apple Mac Os X Server	Version 10.3.3
Apple Mac Os X Server	Version 10.3.4
Apple Mac Os X Server	Version 10.3.5
Apple Mac Os X Server	Version 10.3.6
Apple Mac Os X Server	Version 10.3.7
Apple Mac Os X Server	Version 10.3.8
Apple Mac Os X Server	Version 10.3.9
Apple Mac Os X Server	Version 10.3
Apple Mac Os X Server	Version 10.4.1
Apple Mac Os X Server	Version 10.4.2
Apple Mac Os X Server	Version 10.4.3
Apple Mac Os X Server	Version 10.4.4
Apple Mac Os X Server	Version 10.4.5
Apple Mac Os X Server	Version 10.4.6
Apple Mac Os X Server	Version 10.4.7
Apple Mac Os X Server	Version 10.4.8
Apple Mac Os X Server	Version 10.4.9
Apple Mac Os X Server	Version 10.4

Related CWEs

Use of Externally-Controlled Format String

The product uses a function that accepts a format string as an argument, but the format string originates from an external source.

References (22)

http://docs.info.apple.com/article.html?artnum=305530

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2007/May/msg00004.html

Source: cve@mitre.org

http://secunia.com/advisories/25402

Source: cve@mitre.org

Vendor Advisory

http://www.osvdb.org/35143

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/469882/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/469889/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/24144

Source: cve@mitre.org

http://www.securityfocus.com/bid/24208

Source: cve@mitre.org

http://www.securitytracker.com/id?1018125

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/1939

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/34505

Source: cve@mitre.org

http://docs.info.apple.com/article.html?artnum=305530

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.apple.com/archives/security-announce/2007/May/msg00004.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/25402

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.osvdb.org/35143

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/469882/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/469889/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/24144

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/24208

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1018125

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/1939

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/34505

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.