Lucene search

K
cveMitreCVE-2007-0734
HistoryApr 10, 2007 - 10:19 p.m.

CVE-2007-0734

2007-04-1022:19:00
CWE-119
mitre
web.nvd.nist.gov
33
cve-2007-0734
fsck
airport extreme base station
mac os x
firmware update
memory corruption
password protection

CVSS2

5.4

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.9

Confidence

Low

EPSS

0.007

Percentile

80.9%

fsck, as used by the AirPort Disk feature of the AirPort Extreme Base Station with 802.11n before Firmware Update 7.1, and by Apple Mac OS X 10.3.9 through 10.4.9, does not properly enforce password protection of a USB hard drive, which allows context-dependent attackers to list arbitrary directories or execute arbitrary code, resulting from memory corruption.

Affected configurations

Nvd
Node
appleairport_extremeRange7.0
AND
applemac_os_xMatch10.3.9
OR
applemac_os_xMatch10.4
OR
applemac_os_xMatch10.4.1
OR
applemac_os_xMatch10.4.2
OR
applemac_os_xMatch10.4.3
OR
applemac_os_xMatch10.4.4
OR
applemac_os_xMatch10.4.5
OR
applemac_os_xMatch10.4.6
OR
applemac_os_xMatch10.4.7
OR
applemac_os_xMatch10.4.8
OR
applemac_os_xMatch10.4.9
VendorProductVersionCPE
appleairport_extreme*cpe:2.3:h:apple:airport_extreme:*:*:*:*:*:*:*:*
applemac_os_x10.3.9cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*
applemac_os_x10.4cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*
applemac_os_x10.4.1cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*
applemac_os_x10.4.2cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*
applemac_os_x10.4.3cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*
applemac_os_x10.4.4cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*
applemac_os_x10.4.5cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*
applemac_os_x10.4.6cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*
applemac_os_x10.4.7cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*
Rows per page:
1-10 of 121

CVSS2

5.4

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.9

Confidence

Low

EPSS

0.007

Percentile

80.9%

Related for CVE-2007-0734