Lucene search

[email protected]CVE-2007-0723

HistoryMar 13, 2007 - 10:19 p.m.

CVE-2007-0723

2007-03-1322:19:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2007-0723

unspecified vulnerability

authentication feature

directoryservice

ds plug-ins

apple

mac os x

ldap

remote code execution

6.5 Medium

AI Score

Confidence

Low

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

0.013 Low

EPSS

Percentile

85.8%

JSON

Unspecified vulnerability in the authentication feature for DirectoryService (DS Plug-Ins) for Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remote authenticated LDAP users to modify the root password and gain privileges via unknown vectors.

CPENameOperatorVersion
apple:mac_os_xapple mac os xeq10.4.3
apple:mac_os_x_serverapple mac os x servereq10.4.3
apple:mac_os_xapple mac os xeq10.4.1
apple:mac_os_x_serverapple mac os x servereq10.4.2
apple:mac_os_x_serverapple mac os x servereq10.4.4
apple:mac_os_x_serverapple mac os x servereq10.4.1
apple:mac_os_xapple mac os xeq10.4.7
apple:mac_os_xapple mac os xeq10.4.4
apple:mac_os_x_serverapple mac os x servereq10.4
apple:mac_os_x_serverapple mac os x servereq10.4.5

CPE	Name	Operator	Version
apple:mac_os_x	apple mac os x	eq	10.4.3
apple:mac_os_x_server	apple mac os x server	eq	10.4.3
apple:mac_os_x	apple mac os x	eq	10.4.1
apple:mac_os_x_server	apple mac os x server	eq	10.4.2
apple:mac_os_x_server	apple mac os x server	eq	10.4.4
apple:mac_os_x_server	apple mac os x server	eq	10.4.1
apple:mac_os_x	apple mac os x	eq	10.4.7
apple:mac_os_x	apple mac os x	eq	10.4.4
apple:mac_os_x_server	apple mac os x server	eq	10.4
apple:mac_os_x_server	apple mac os x server	eq	10.4.5

Rows per page:

1-10 of 201

References

docs.info.apple.com/article.html?artnum=305214

lists.apple.com/archives/security-announce/2007/Mar/msg00002.html

secunia.com/advisories/24479

www.kb.cert.org/vuls/id/557064

www.osvdb.org/34848

www.securityfocus.com/bid/22948

www.securitytracker.com/id?1017751

www.us-cert.gov/cas/techalerts/TA07-072A.html

www.vupen.com/english/advisories/2007/0930

6.5 Medium

AI Score

Confidence

Low

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

0.013 Low

EPSS

Percentile

85.8%

JSON

Related for CVE-2007-0723

cert1 prion1 securityvulns1 nessus1