Lucene search
+L

Apple Mac OSX 10.4.9 - VPND Local Format String

🗓️ 29 May 2007 00:00:00Reported by Chris AnleyType 
exploitdb
 exploitdb
🔗 www.exploit-db.com👁 28 Views

Apple Mac OSX 10.4.9 - VPND Format String Vulnerabilit

Related
Code
ReporterTitlePublishedViews
Family
CVE
CVE-2007-0753
24 May 200722:00
cve
Cvelist
CVE-2007-0753
24 May 200722:00
cvelist
Exploit DB
Apple Mac OSX < 2007-005 - 'vpnd' Local Privilege Escalation
30 May 200700:00
exploitdb
EUVD
EUVD-2007-0750
7 Oct 202500:30
euvd
exploitpack
Apple Mac OSX 2007-005 - vpnd Local Privilege Escalation
30 May 200700:00
exploitpack
Tenable Nessus
Mac OS X Multiple Vulnerabilities (Security Update 2007-005)
25 May 200700:00
nessus
NVD
CVE-2007-0753
24 May 200722:30
nvd
Prion
Format string
24 May 200722:30
prion
securityvulns
Mac OS X vpnd local format string
29 May 200700:00
securityvulns
securityvulns
Mac OS X vpnd format string security vulnerability
29 May 200700:00
securityvulns
Rows per page
source: https://www.securityfocus.com/bid/24208/info

Apple Mac OS X's VPN service daemon is prone to a format-string vulnerability because it fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function.

Attackers may exploit this issue to crash the application or execute arbitrary code with superuser privileges. Successful exploits can result in a complete compromise of vulnerable computers.

Apple Mac OS X Server 10.4.9 and prior versions are vulnerable to this issue.

This issue was originally included in BID 24144 (Apple Mac OS X 2007-005 Multiple Security Vulnerabilities), but has been given its own record.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30096.tar.gz

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

07 Dec 2013 00:00Current
7.4High risk
Vulners AI Score7.4
CVSS 27.2
EPSS0.0093
28