CVE-2007-0734: Buffer Overflow
fsck, as used by the AirPort Disk feature of the AirPort Extreme Base Station with 802.11n before Firmware Update 7.1, and by Apple Mac OS X 10.3.9 through 10.4.9, does not properly enforce password protection of a USB hard drive, which allows context-dependent attackers to list arbitrary directories or execute arbitrary code, resulting from memory corruption.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-0734?
CVE-2007-0734 is classified as a medium severity vulnerability due to its potential for unauthorized access to USB hard drives.
How do I fix CVE-2007-0734?
To address CVE-2007-0734, it is recommended to update to AirPort Extreme Firmware Update 7.1 or later, or upgrade to a non-vulnerable version of Mac OS X.
What systems are affected by CVE-2007-0734?
CVE-2007-0734 affects AirPort Extreme Base Station devices running firmware versions prior to 7.1 and Mac OS X versions from 10.3.9 through 10.4.9.
What type of attack does CVE-2007-0734 enable?
CVE-2007-0734 allows context-dependent attackers to list arbitrary directories on a vulnerable USB hard drive due to insufficient password protection.
Is there a specific version of Mac OS X that is immune to CVE-2007-0734?
Yes, Mac OS X versions later than 10.4.9 are not affected by CVE-2007-0734.