CVE

Id
24100  
CVE No.
CVE-2007-0743  
Status
Candidate  
Description
URLMount in Apple Mac OS X 10.3.9 through 10.4.9 passes the username and password credentials for mounting filesystems on SMB servers as command line arguments to the mount_sub command, which may allow local users to obtain sensitive information by listing the process.  
Phase
Assigned (20070205)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
235216 24100 CVE-2007-0743 CONFIRM:http://docs.info.apple.com/article.html?artnum=305391  View
235217 24100 CVE-2007-0743 APPLE:APPLE-SA-2007-04-19  View
235218 24100 CVE-2007-0743 URL:http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html  View
235219 24100 CVE-2007-0743 CERT:TA07-109A  View
235220 24100 CVE-2007-0743 URL:http://www.us-cert.gov/cas/techalerts/TA07-109A.html  View
235221 24100 CVE-2007-0743 BID:23569  View
235222 24100 CVE-2007-0743 URL:http://www.securityfocus.com/bid/23569  View
235223 24100 CVE-2007-0743 VUPEN:ADV-2007-1470  View
235224 24100 CVE-2007-0743 URL:http://www.vupen.com/english/advisories/2007/1470  View
235225 24100 CVE-2007-0743 OSVDB:34867  View
235226 24100 CVE-2007-0743 URL:http://www.osvdb.org/34867  View
235227 24100 CVE-2007-0743 SECTRACK:1017942  View
235228 24100 CVE-2007-0743 URL:http://www.securitytracker.com/id?1017942  View
235229 24100 CVE-2007-0743 SECUNIA:24966  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52832 JVNDB-2007-001524 Apple Security Update 2007-004 におけるディレクトリにアクセスされる脆弱性 Apple Security Update 2007-004 は、Apple Mac OS X Server の FTPServer に対して誤った設定ファイルを使用するため、他のディレクトリにアクセスされる脆弱性が存在します。 CVE-2007-0745 24100 7.1 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001524.html  View