CVE-2007-4683: Path Traversal
Published Nov 15, 2007
·Updated
Directory traversal vulnerability in the kernel in Apple Mac OS X 10.4 through 10.4.10 allows local users to bypass the chroot mechanism via a relative path when changing the current working directory.
Affected Software
12 affected components
Apple iOS and macOS=10.4.3
Apple iOS and macOS=10.4.1
Apple iOS and macOS=10.4.10
Apple iOS and macOS=10.4.9
Apple iOS and macOS=10.4.7
Apple iOS and macOS=10.4.4
Apple iOS and macOS=10.4.0
Apple iOS and macOS=10.4
Apple iOS and macOS=10.4.6
Apple iOS and macOS=10.4.5
Apple iOS and macOS=10.4.8
Apple iOS and macOS=10.4.2
Remediation
Event History
Nov 15, 2007
CVE Published
01:46 AM
CVE Published
via MITRE·06:00 AM
Data Sourced
via MITRE·06:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-4683?
CVE-2007-4683 is considered a high severity vulnerability due to its potential to allow bypassing the chroot security mechanism.
2
How do I fix CVE-2007-4683?
To fix CVE-2007-4683, upgrade your Apple Mac OS X to a version prior to 10.4.10 that includes the security patches.
3
Who is affected by CVE-2007-4683?
Local users on Apple Mac OS X versions 10.4 through 10.4.10 are affected by CVE-2007-4683.
4
What type of vulnerability is CVE-2007-4683?
CVE-2007-4683 is a directory traversal vulnerability that allows unauthorized access to files outside the intended directory.
5
Can CVE-2007-4683 be exploited remotely?
CVE-2007-4683 cannot be exploited remotely; it requires local user access to the system.