CVE-2007-4702
First published: Thu Nov 15 2007(Updated: )
The Application Firewall in Apple Mac OS X 10.5, when "Block all incoming connections" is enabled, does not prevent root processes or mDNSResponder from accepting connections, which might allow remote attackers or local root processes to bypass intended access restrictions.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple iOS and macOS | =10.5 | |
| Apple macOS Server | =10.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.apple.com/archives/security-announce/2007/Nov/msg00004.html
- http://docs.info.apple.com/article.html?artnum=307004
- http://www.securityfocus.com/bid/26461
- http://securitytracker.com/id?1018958
- http://secunia.com/advisories/27695
- http://www.vupen.com/english/advisories/2007/3897
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38506
Frequently Asked Questions
What is the severity of CVE-2007-4702?
CVE-2007-4702 has a moderate severity level due to its potential to allow bypassing access controls.
How do I fix CVE-2007-4702?
To mitigate CVE-2007-4702, users should disable the 'Block all incoming connections' setting in the Application Firewall.
What systems are affected by CVE-2007-4702?
CVE-2007-4702 affects Apple Mac OS X 10.5 and Apple Mac OS X Server 10.5.
What are the risks associated with CVE-2007-4702?
The primary risk of CVE-2007-4702 is that it allows unauthorized incoming connections to root processes, compromising system security.
Can CVE-2007-4702 be exploited remotely?
Yes, CVE-2007-4702 can potentially be exploited remotely by attackers if certain conditions are met.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/references
- agent/weakness
- agent/remedy
- agent/author
- agent/last-modified-date
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- agent/softwarecombine
- vendor/apple
- canonical/apple ios and macos
- version/apple ios and macos/10.5
- canonical/apple macos server
- version/apple macos server/10.5