CVE-2007-0726: Medium severity Apple iOS and macOS vulnerability
The SSH key generation process in OpenSSH in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remote attackers to cause a denial of service by connecting to the server before SSH has finished creating keys, which causes the keys to be regenerated and can break trust relationships that were based on the original keys.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2007-0726?
CVE-2007-0726 has a moderate severity rating as it can lead to denial of service in affected systems.
How do I fix CVE-2007-0726?
To fix CVE-2007-0726, users should upgrade to a patched version of OpenSSH or apply the relevant security updates provided by Apple.
Which versions of macOS are affected by CVE-2007-0726?
CVE-2007-0726 affects Apple Mac OS X versions 10.3.9 and 10.4 through 10.4.8.
What vulnerability does CVE-2007-0726 exploit?
CVE-2007-0726 exploits a flaw in the SSH key generation process that allows remote attackers to cause a denial of service.
What are the implications of CVE-2007-0726 on SSH key trust relationships?
CVE-2007-0726 can break trust relationships by causing SSH to regenerate keys during an active connection, potentially compromising security.