PT-2007-2203 · Apple · Pppd+1

Publicado 2007-05-24 · Atualizado 2017-07-29 · CVE-2007-0752

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions pppd in Apple Mac OS X version 10.4.8

Description The issue allows local users to load arbitrary plugins and gain root privileges by bypassing the ownership check of the stdin file descriptor.

Recommendations For Apple Mac OS X version 10.4.8, consider restricting access to the pppd daemon to minimize the risk of exploitation until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2007-0752

Produtos afetados

Macos X

Pppd

Referências · 11

• 🔥 https://exploit-db.com/exploits/3985 · Exploit
• http://docs.info.apple.com/article.html?artnum=305530 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34503 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-0752 · Nota de Segurança
• http://vupen.com/english/advisories/2007/1939 · Nota
• http://secunia.com/advisories/25402 · Nota
• http://securityfocus.com/bid/24144 · Nota
• http://lists.apple.com/archives/security-announce/2007/May/msg00004.html · Aviso do Fabricante
• http://osvdb.org/35144 · Nota
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=537 · Aviso do Fabricante
• http://securitytracker.com/id?1018124 · Nota