CVE-2007-0753 : Format string vulnerability in the VPN daemon (vpnd) in Apple Mac OS X 10.3.9 an

Format string vulnerability in the VPN daemon (vpnd) in Apple Mac OS X 10.3.9 and 10.4.9 allows local users to execute arbitrary code via the -i parameter.

Published 2007-05-24 22:30:00

Updated 2025-04-09 00:30:58

Source MITRE

View at NVD, CVE.org

Vulnerability category: Execute code

Products affected by CVE-2007-0753

Apple » Mac Os X » Version: 10.4.9
cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*
Matching versions
Apple » Mac Os X » Version: 10.3
cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*
Matching versions
Apple » Mac Os X » Version: 10.3.1
cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*
Matching versions
Apple » Mac Os X » Version: 10.3.2
cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*
Matching versions
Apple » Mac Os X » Version: 10.3.3
cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*
Matching versions
Apple » Mac Os X » Version: 10.3.9
cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*
Matching versions
Apple » Mac Os X » Version: 10.3.4
cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*
Matching versions
Apple » Mac Os X » Version: 10.4
cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*
Matching versions
Apple » Mac Os X » Version: 10.3.5
cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*
Matching versions
Apple » Mac Os X » Version: 10.3.6
cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*
Matching versions
Apple » Mac Os X » Version: 10.3.7
cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*
Matching versions
Apple » Mac Os X » Version: 10.3.8
cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*
Matching versions
Apple » Mac Os X » Version: 10.4.1
cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*
Matching versions
Apple » Mac Os X » Version: 10.4.2
cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*
Matching versions
Apple » Mac Os X » Version: 10.4.4
cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*
Matching versions
Apple » Mac Os X » Version: 10.4.5
cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*
Matching versions
Apple » Mac Os X » Version: 10.4.3
cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*
Matching versions
Apple » Mac Os X » Version: 10.4.6
cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*
Matching versions
Apple » Mac Os X » Version: 10.4.7
cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*
Matching versions
Apple » Mac Os X » Version: 10.4.8
cpe:2.3:o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*
Matching versions
Apple » Mac Os X Server » Version: 10.3
cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*
Matching versions
Apple » Mac Os X Server » Version: 10.3.1
cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*
Matching versions
Apple » Mac Os X Server » Version: 10.3.2
cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*
Matching versions
Apple » Mac Os X Server » Version: 10.3.3
cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*
Matching versions
Apple » Mac Os X Server » Version: 10.3.4
cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*
Matching versions
Apple » Mac Os X Server » Version: 10.3.5
cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*
Matching versions
Apple » Mac Os X Server » Version: 10.3.6
cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*
Matching versions
Apple » Mac Os X Server » Version: 10.3.8
cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*
Matching versions
Apple » Mac Os X Server » Version: 10.3.9
cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*
Matching versions
Apple » Mac Os X Server » Version: 10.3.7
cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*
Matching versions
Apple » Mac Os X Server » Version: 10.4
cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*
Matching versions
Apple » Mac Os X Server » Version: 10.4.1
cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*
Matching versions
Apple » Mac Os X Server » Version: 10.4.2
cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*
Matching versions
Apple » Mac Os X Server » Version: 10.4.3
cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*
Matching versions
Apple » Mac Os X Server » Version: 10.4.4
cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*
Matching versions
Apple » Mac Os X Server » Version: 10.4.5
cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*
Matching versions
Apple » Mac Os X Server » Version: 10.4.6
cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*
Matching versions
Apple » Mac Os X Server » Version: 10.4.7
cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*
Matching versions
Apple » Mac Os X Server » Version: 10.4.8
cpe:2.3:o:apple:mac_os_x_server:10.4.8:*:*:*:*:*:*:*
Matching versions
Apple » Mac Os X Server » Version: 10.4.9
cpe:2.3:o:apple:mac_os_x_server:10.4.9:*:*:*:*:*:*:*
Matching versions

Threat overview for CVE-2007-0753

Top countries where our scanners detected CVE-2007-0753

Top open port discovered on systems with this issue 80

IPs affected by CVE-2007-0753 5

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2007-0753!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2007-0753

EPSS FAQ

0.41%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 59 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2007-0753

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C	3.9	10.0	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

CWE ids for CVE-2007-0753

CWE-134 Use of Externally-Controlled Format String

The product uses a function that accepts a format string as an argument, but the format string originates from an external source.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2007-0753

http://www.securityfocus.com/bid/24144

Apple Mac OS X 2007-005 Multiple Security Vulnerabilities

CVEs referencing this url
http://docs.info.apple.com/article.html?artnum=305530

CVEs referencing this url
http://lists.apple.com/archives/security-announce/2007/May/msg00004.html

CVEs referencing this url
https://exchange.xforce.ibmcloud.com/vulnerabilities/34505
http://www.osvdb.org/35143
http://www.securityfocus.com/bid/24208
http://www.vupen.com/english/advisories/2007/1939

Webmail: access your OVH emails on ovhcloud.com | OVHcloud
Vendor Advisory

CVEs referencing this url
http://www.securityfocus.com/archive/1/469889/100/0/threaded
http://www.securityfocus.com/archive/1/469882/100/0/threaded
http://www.securitytracker.com/id?1018125
http://secunia.com/advisories/25402

About Secunia Research | Flexera
Vendor Advisory

CVEs referencing this url