CVE-2007-6276: High severity Apple Mac OS X Server vulnerability

Published Dec 7, 2007

Updated

The acceptconnections function in the virtual private network daemon (vpnd) in Apple Mac OS X 10.5 before 10.5.4 allows remote attackers to cause a denial of service (divide-by-zero error and daemon crash) via a crafted load balancing packet to UDP port 4112.

Affected Software

8 affected components

Apple Mac OS X Server=10.5.2

Apple iOS and macOS=10.5.1

Apple Mac OS X Server=10.5.1

Apple iOS and macOS=10.5.3

Apple Mac OS X Server=10.5.3

Apple iOS and macOS=10.5

Apple iOS and macOS=10.5.2

Apple Mac OS X Server=10.5

Event History

Dec 7, 2007

CVE Published

11:46 AM

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-6276?

CVE-2007-6276 is classified as a high severity vulnerability due to its potential to cause remote denial of service.

What versions of macOS are affected by CVE-2007-6276?

CVE-2007-6276 affects Apple Mac OS X versions 10.5.1 through 10.5.3, as well as 10.5.2.

How do I fix CVE-2007-6276?

To mitigate CVE-2007-6276, update your Apple Mac OS X to version 10.5.4 or later.

What type of attack does CVE-2007-6276 facilitate?

CVE-2007-6276 facilitates a denial of service attack that causes a divide-by-zero error leading to the vpnd crash.

Is CVE-2007-6276 a local or remote vulnerability?

CVE-2007-6276 is a remote vulnerability, allowing attackers to exploit the issue over the network.