CVE-2007-0752: High severity Apple Mac OS X Server vulnerability
Published May 24, 2007
·Updated
The PPP daemon (pppd) in Apple Mac OS X 10.4.8 checks ownership of the stdin file descriptor to determine if the invoker has sufficient privileges, which allows local users to load arbitrary plugins and gain root privileges by bypassing this check.
Affected Software
2 affected components
Apple Mac OS X Server=10.4.8
Apple iOS and macOS=10.4.8
Event History
May 24, 2007
CVE Published
10:30 PM
May 25, 2007
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-0752?
CVE-2007-0752 is classified as a critical severity vulnerability due to its potential to allow local users to gain root privileges.
2
How do I fix CVE-2007-0752?
To fix CVE-2007-0752, it is recommended to upgrade to a patched version of Apple's operating system that addresses this vulnerability.
3
Who is affected by CVE-2007-0752?
CVE-2007-0752 affects users of Apple Mac OS X and Mac OS X Server version 10.4.8.
4
What type of vulnerability is CVE-2007-0752?
CVE-2007-0752 is a privilege escalation vulnerability that allows unauthorized access to system resources.
5
When was CVE-2007-0752 discovered?
CVE-2007-0752 was reported in May 2007.