CVE-2007-4703
First published: Thu Nov 15 2007(Updated: )
The Application Firewall in Apple Mac OS X 10.5 does not prevent a root process from accepting incoming connections, even when "Block incoming connections" has been set for its associated executable, which might allow remote attackers or local root processes to bypass intended access restrictions.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple iOS and macOS | =10.5 | |
| Apple macOS Server | =10.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.apple.com/archives/security-announce/2007/Nov/msg00004.html
- http://docs.info.apple.com/article.html?artnum=307004
- http://www.securityfocus.com/bid/26460
- http://securitytracker.com/id?1018958
- http://secunia.com/advisories/27695
- http://www.vupen.com/english/advisories/2007/3897
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38479
Frequently Asked Questions
What is the severity of CVE-2007-4703?
CVE-2007-4703 is considered a medium severity vulnerability due to the potential for unauthorized access by bypassing firewall restrictions.
How do I fix CVE-2007-4703?
To mitigate CVE-2007-4703, ensure that you upgrade to a later version of Mac OS X that addresses this vulnerability.
Who is affected by CVE-2007-4703?
CVE-2007-4703 affects users of Apple Mac OS X 10.5 and Apple Mac OS X Server 10.5.
What kind of attacks can exploit CVE-2007-4703?
CVE-2007-4703 can be exploited by attackers using either remote connections or local root processes to bypass firewall settings.
Is there a workaround for CVE-2007-4703?
A potential workaround for CVE-2007-4703 includes limiting the use of root processes or modifying firewall settings to enhance security.
- agent/type
- agent/remedy
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/last-modified-date
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/apple
- canonical/apple ios and macos
- version/apple ios and macos/10.5
- canonical/apple macos server
- version/apple macos server/10.5