First published: Thu May 24 2007(Updated: )
The PPP daemon (pppd) in Apple Mac OS X 10.4.8 checks ownership of the stdin file descriptor to determine if the invoker has sufficient privileges, which allows local users to load arbitrary plugins and gain root privileges by bypassing this check.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Apple Mac OS X Server | =10.4.8 | |
macOS Yosemite | =10.4.8 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2007-0752 is classified as a critical severity vulnerability due to its potential to allow local users to gain root privileges.
To fix CVE-2007-0752, it is recommended to upgrade to a patched version of Apple's operating system that addresses this vulnerability.
CVE-2007-0752 affects users of Apple Mac OS X and Mac OS X Server version 10.4.8.
CVE-2007-0752 is a privilege escalation vulnerability that allows unauthorized access to system resources.
CVE-2007-0752 was reported in May 2007.