CVE-2007-0734
fsck, as used by the AirPort Disk feature of the AirPort Extreme Base Station with 802.11n before Firmware Update 7.1, and by Apple Mac OS X 10.3.9 through 10.4.9, does not properly enforce password protection of a USB hard drive, which allows…
Does this matter?
Lower severity and a low EPSS score (0.80%). Track it; it rarely justifies an emergency change on its own.
Description
fsck, as used by the AirPort Disk feature of the AirPort Extreme Base Station with 802.11n before Firmware Update 7.1, and by Apple Mac OS X 10.3.9 through 10.4.9, does not properly enforce password protection of a USB hard drive, which allows context-dependent attackers to list arbitrary directories or execute arbitrary code, resulting from memory corruption.
- CVSS 2.0
- 5.4 MEDIUMAV:A/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 0.80% probability · 54th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- apple/mac os x
- Source
- cve@mitre.org
References
- http://docs.info.apple.com/article.html?artnum=305366Patch, Vendor Advisory
- http://docs.info.apple.com/article.html?artnum=305391
- http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html
- http://lists.apple.com/archives/security-announce/2007/Apr/msg00000.htmlVendor Advisory
- http://secunia.com/advisories/24830Vendor Advisory
- http://secunia.com/advisories/24966Vendor Advisory
- http://www.securityfocus.com/bid/23396
- http://www.securityfocus.com/bid/23569
- http://www.securitytracker.com/id?1017889
- http://www.securitytracker.com/id?1017942
- http://www.us-cert.gov/cas/techalerts/TA07-109A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2007/1308Vendor Advisory
- http://www.vupen.com/english/advisories/2007/1470Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33527
- http://docs.info.apple.com/article.html?artnum=305366Patch, Vendor Advisory
- http://docs.info.apple.com/article.html?artnum=305391
- http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html
- http://lists.apple.com/archives/security-announce/2007/Apr/msg00000.htmlVendor Advisory
- http://secunia.com/advisories/24830Vendor Advisory
- http://secunia.com/advisories/24966Vendor Advisory
- http://www.securityfocus.com/bid/23396
- http://www.securityfocus.com/bid/23569
- http://www.securitytracker.com/id?1017889
- http://www.securitytracker.com/id?1017942
- http://www.us-cert.gov/cas/techalerts/TA07-109A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2007/1308Vendor Advisory
- http://www.vupen.com/english/advisories/2007/1470Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33527
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.