Description
Format string vulnerability in the VPN daemon (vpnd) in Apple Mac OS X 10.3.9 and 10.4.9 allows local users to execute arbitrary code via the -i parameter.
Exploits (2)
exploitdb
WRITEUP
VERIFIED
by Kevin Finisterre · textlocalosx
https://www.exploit-db.com/exploits/4013
References (11)
Core 11
Core References
Vendor Advisory x_refsource_confirm
http://docs.info.apple.com/article.html?artnum=305530
Vendor Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2007/1939
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/34505
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id?1018125
Mailing List vendor-advisory
x_refsource_apple
http://lists.apple.com/archives/security-announce/2007/May/msg00004.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/24208
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/25402
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/24144
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/469882/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/35143
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/469889/100/0/threaded
Scores
EPSS
0.0051
EPSS Percentile
66.7%
Details
CWE
CWE-134
Status
published
Products (40)
apple/mac_os_x
10.3
apple/mac_os_x
10.3.1
apple/mac_os_x
10.3.2
apple/mac_os_x
10.3.3
apple/mac_os_x
10.3.4
apple/mac_os_x
10.3.5
apple/mac_os_x
10.3.6
apple/mac_os_x
10.3.7
apple/mac_os_x
10.3.8
apple/mac_os_x
10.3.9
... and 30 more
Published
May 24, 2007
Tracked Since
Feb 18, 2026