CVE-2007-4687 — Apple MAC OS X vulnerability

CWE-162 documents2 sources
Severity
9.3CRITICALNVD
EPSS
0.5%
top 35.63%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Apple MAC OS XApple MAC OS X Server
Timeline
PublishedNov 15
Latest updateMay 1

Description

The remote_cmds component in Apple Mac OS X 10.4 through 10.4.10 contains a symbolic link from the tftpboot private directory to the root directory, which allows tftpd users to escape the private directory and access arbitrary files.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages2 packages

▶NVDapple/mac_os_x10 versions+9
▶NVDapple/mac_os_x_server10 versions+9

Patches

Patch: lists.apple.com ↗Patch: lists.apple.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-rpmf-q3w7-3ccm: The remote_cmds component in Apple Mac OS X 10↗2022-05-01
▶
CVE-2007-4687 — Apple MAC OS X vulnerability | cvebase