Description
Format string vulnerability in Point-to-Point Protocol (PPP) daemon (pppd) 2.4.0 for Mac OS X 10.3.2 and earlier allows remote attackers to read arbitrary pppd process data, including PAP or CHAP authentication credentials, to gain privileges.
References (6)
Core 6
Core References
Mailing List vendor-advisory
x_refsource_apple
http://lists.apple.com/archives/security-announce/2004/Feb/msg00000.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/15297
Third Party Advisory, US Government Resource third-party-advisory
x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/841742
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/6822
Patch, Vendor Advisory vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/9730
Exploit, Patch, Vendor Advisory vendor-advisory
x_refsource_atstake
http://www.atstake.com/research/advisories/2004/a022304-1.txt
Scores
EPSS
0.0381
EPSS Percentile
89.0%
Details
Status
published
Products (36)
apple/mac_os_x
10.1
apple/mac_os_x
10.1.1
apple/mac_os_x
10.1.2
apple/mac_os_x
10.1.3
apple/mac_os_x
10.1.4
apple/mac_os_x
10.1.5
apple/mac_os_x
10.2
apple/mac_os_x
10.2.1
apple/mac_os_x
10.2.2
apple/mac_os_x
10.2.3
... and 26 more
Published
Mar 15, 2004
Tracked Since
Feb 18, 2026