Format string vulnerability in the VPN daemon (vpnd) in Apple Mac OS X 10.3.9 and 10.4.9 allows local users to execute arbitrary code via t…

Exploit prediction (EPSS)

0.93% probability of exploitation in the next 30 days, higher than 61% of all scored CVEs.

Exploits and detections

• EDB-4013 Apple Mac OSX < 2007-005 - 'vpnd' Local Privilege Escalation · local · 2007-05-30
• EDB-30096 Apple Mac OSX 10.4.9 - VPND Local Format String · local · 2007-05-29

CVSS scores

Classification

Weakness

• CWE-134 Use of Externally-Controlled Format String

References

• docs.info.apple.com /article.html?artnum=305530 · x_refsource_CONFIRM, x_transferred
• vupen.com /english/advisories/2007/1939 · vdb-entry, x_refsource_VUPEN, x_transferred
• exchange.xforce.ibmcloud.com /vulnerabilities/34505 · vdb-entry, x_refsource_XF, x_transferred
• securitytracker.com /id?1018125 · vdb-entry, x_refsource_SECTRACK, x_transferred
• lists.apple.com /archives/security-announce/2007/May/msg00004.html · vendor-advisory, x_refsource_APPLE, x_transferred
• securityfocus.com /bid/24208 · vdb-entry, x_refsource_BID, x_transferred
• secunia.com /advisories/25402 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• securityfocus.com /bid/24144 · vdb-entry, x_refsource_BID, x_transferred
• securityfocus.com /archive/1/469882/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
• osvdb.org /35143 · vdb-entry, x_refsource_OSVDB, x_transferred
• securityfocus.com /archive/1/469889/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred

Sources

• CVE List: CVE-2007-0753
• NVD: CVE-2007-0753

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.