Secunia Logo
 
CVE Reference: CVE-2007-0734
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2007-0734

Description:
fsck, as used by the AirPort Disk feature of the AirPort Extreme Base Station with 802.11n before Firmware Update 7.1, and by Apple Mac OS X 10.3.9 through 10.4.9, does not properly enforce password protection of a USB hard drive, which allows context-dependent attackers to list arbitrary directories or execute arbitrary code, resulting from memory corruption.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/33527

ST
  1017942
  1017889

SAID
  Secunia Advisory: SA24830
  Secunia Advisory: SA24966

CONFIRM
  http://docs.info.apple.com/article.html?artnum=305391
  http://docs.info.apple.com/article.html?artnum=305366

CERT
  http://www.us-cert.gov/cas/techalerts/TA07-109A.html

BID
  23396
  23569

APPLE
  http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html
  http://lists.apple.com/archives/security-announce/2007/Apr/msg00000.html


Return to the previous page.