CVE-2007-0726 — Apple MAC OS X vulnerability

2 documents2 sources
Severity
5.0MEDIUMNVD
EPSS
1.1%
top 21.54%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Apple MAC OS XApple MAC OS X Server
Timeline
PublishedMar 13
Latest updateMay 1

Description

The SSH key generation process in OpenSSH in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remote attackers to cause a denial of service by connecting to the server before SSH has finished creating keys, which causes the keys to be regenerated and can break trust relationships that were based on the original keys.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages2 packages

▶NVDapple/mac_os_x_server10 versions+9
▶NVDapple/mac_os_x10 versions+9

Patches

Patch: lists.apple.com ↗Patch: lists.apple.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-jmfq-982w-g5c5: The SSH key generation process in OpenSSH in Apple Mac OS X 10↗2022-05-01
▶
CVE-2007-0726 — Apple MAC OS X vulnerability | cvebase