First published: Tue Apr 24 2007(Updated: )
URLMount in Apple Mac OS X 10.3.9 through 10.4.9 passes the username and password credentials for mounting filesystems on SMB servers as command line arguments to the mount_sub command, which may allow local users to obtain sensitive information by listing the process.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Apple iOS and macOS | =10.4.3 | |
Apple iOS and macOS | =10.4.1 | |
Apple iOS and macOS | =10.4.9 | |
Apple iOS and macOS | =10.4.7 | |
Apple iOS and macOS | =10.4.4 | |
Apple iOS and macOS | =10.4 | |
Apple iOS and macOS | =10.4.6 | |
Apple iOS and macOS | =10.4.5 | |
Apple iOS and macOS | =10.3.9 | |
Apple iOS and macOS | =10.4.8 | |
Apple iOS and macOS | =10.4.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2007-0743 has a medium severity rating due to potential information disclosure.
To fix CVE-2007-0743, update your Mac OS X version to a later release that addresses this vulnerability.
CVE-2007-0743 affects Mac OS X versions 10.3.9 and 10.4.1 through 10.4.9.
CVE-2007-0743 is an information disclosure vulnerability related to the URLMount utility.
Yes, local users can exploit CVE-2007-0743 to gain access to sensitive username and password information.