vulnwire
7.2high

CVE-2007-07521 exploit

The PPP daemon (pppd) in Apple Mac OS X 10.4.8 checks ownership of the stdin file descriptor to determine if the invoker has sufficient pri…

Published 19 y ago · modified 4 mo ago · JSON

CVSS
7.2
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.7%
percentile 54%
Public exploits
1
Exploit-DB

The PPP daemon (pppd) in Apple Mac OS X 10.4.8 checks ownership of the stdin file descriptor to determine if the invoker has sufficient privileges, which allows local users to load arbitrary plugins and gain root privileges by bypassing this check.

Exploit prediction (EPSS)

0.72% probability of exploitation in the next 30 days, higher than 54% of all scored CVEs.

Exploits and detections

  • EDB-3985 Apple Mac OSX 10.4.8 - pppd Plugin Loading Privilege Escalation · local · 2007-05-25

CVSS scores

Assigned byVersionScoreVector
NVD2.07.2AV:L/AC:L/Au:N/C:C/I:C/A:C

References

  • docs.info.apple.com /article.html?artnum=305530 · x_refsource_CONFIRM, x_transferred
  • securitytracker.com /id?1018124 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • vupen.com /english/advisories/2007/1939 · vdb-entry, x_refsource_VUPEN, x_transferred
  • lists.apple.com /archives/security-announce/2007/May/msg00004.html · vendor-advisory, x_refsource_APPLE, x_transferred
  • secunia.com /advisories/25402 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/34503 · vdb-entry, x_refsource_XF, x_transferred
  • securityfocus.com /bid/24144 · vdb-entry, x_refsource_BID, x_transferred
  • osvdb.org /35144 · vdb-entry, x_refsource_OSVDB, x_transferred
  • labs.idefense.com /intelligence/vulnerabilities/display.php?id=537 · third-party-advisory, x_refsource_IDEFENSE, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.