NVD

Id
52973  
Name
CVE-2007-0752  
Description
The PPP daemon (pppd) in Apple Mac OS X 10.4.8 checks ownership of the stdin file descriptor to determine if the invoker has sufficient privileges, which allows local users to load arbitrary plugins and gain root privileges by bypassing this check.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-05-24  
Modified Date
2013-07-06  
Seq
2007-0752  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
267754 52973 CVE-2007-0752 http://docs.info.apple.com/article.html?artnum=305530  View
267755 52973 CVE-2007-0752 20070524 Apple Computer Mac OS X pppd Plugin Loading Privilege Escalation Vulnerability  View
267756 52973 CVE-2007-0752 APPLE-SA-2007-05-24  View
267757 52973 CVE-2007-0752 24144  View
267758 52973 CVE-2007-0752 1018124  View
267759 52973 CVE-2007-0752 ADV-2007-1939  View
267760 52973 CVE-2007-0752 macos-pppd-privilege-escalation(34503)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52837 JVNDB-2007-001529 Apple Mac OS X の PPP デーモンにおける任意のプラグインを実行される脆弱性 Apple Mac OS X の PPP デーモン (pppd) は、呼び出し元が適切な権限を保持しているか確認する際に stdin ファイル解析部の所有権をチェックするため、任意のプラグインを実行される、および root 権限を取得される脆弱性が存在します。 CVE-2007-0752 24107 CVE-2007-0752 52973 7.2 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001529.html 2007-05-24 2012-06-26 View