Lucene search

PRIOn knowledge basePRION:CVE-2007-4702

HistoryNov 15, 2007 - 8:46 p.m.

Security feature bypass

2007-11-1520:46:00

PRIOn knowledge base

www.prio-n.com

6.4 Medium

AI Score

Confidence

Low

0.02 Low

EPSS

Percentile

88.8%

JSON

The Application Firewall in Apple Mac OS X 10.5, when “Block all incoming connections” is enabled, does not prevent root processes or mDNSResponder from accepting connections, which might allow remote attackers or local root processes to bypass intended access restrictions.

CPENameOperatorVersion
mac_os_xeq10.5
mac_os_x_servereq10.5

CPE	Name	Operator	Version
	mac_os_x	eq	10.5
	mac_os_x_server	eq	10.5

References

docs.info.apple.com/article.html?artnum=307004

lists.apple.com/archives/security-announce/2007/Nov/msg00004.html

secunia.com/advisories/27695

securitytracker.com/id?1018958

www.securityfocus.com/bid/26461

www.vupen.com/english/advisories/2007/3897

exchange.xforce.ibmcloud.com/vulnerabilities/38506