Vulnerability Name:
CVE-2007-0723 (CCN-32971)
Assigned:
2007-03-13
Published:
2007-03-13
Updated:
2011-03-08
Summary:
Unspecified vulnerability in the authentication feature for DirectoryService (DS Plug-Ins) for Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remote authenticated LDAP users to modify the root password and gain privileges via unknown vectors.
CVSS v3 Severity:
9.0 Critical
(CCN CVSS v3.1 Vector:
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
)
Exploitability Metrics:
Attack Vector (AV):
Network
Attack Complexity (AC):
Low
Privileges Required (PR):
Low
User Interaction (UI):
Required
Scope:
Scope (S):
Changed
Impact Metrics:
Confidentiality (C):
High
Integrity (I):
High
Availibility (A):
High
CVSS v2 Severity:
8.5 High
(CVSS v2 Vector:
AV:N/AC:M/Au:S/C:C/I:C/A:C
)
6.3 Medium
(Temporal CVSS v2 Vector:
AV:N/AC:M/Au:S/C:C/I:C/A:C/E:U/RL:OF/RC:C
)
Exploitability Metrics:
Access Vector (AV):
Network
Access Complexity (AC):
Medium
Authentication (Au):
Single_Instance
Impact Metrics:
Confidentiality (C):
Complete
Integrity (I):
Complete
Availibility (A):
Complete
9.0 High
(CCN CVSS v2 Vector:
AV:N/AC:L/Au:S/C:C/I:C/A:C
)
6.7 Medium
(CCN Temporal CVSS v2 Vector:
AV:N/AC:L/Au:S/C:C/I:C/A:C/E:U/RL:OF/RC:C
)
Exploitability Metrics:
Access Vector (AV):
Network
Access Complexity (AC):
Low
Athentication (Au):
Single_Instance
Impact Metrics:
Confidentiality (C):
Complete
Integrity (I):
Complete
Availibility (A):
Complete
Vulnerability Type:
CWE-Other
Vulnerability Consequences:
Gain Privileges
References:
Source: MITRE
Type: CNA
CVE-2007-0723
Source: CCN
Type: Mac OS X 10.4.9 and Security Update 2007-003
About the security content of Mac OS X 10.4.9 and Security Update 2007-003
Source: CONFIRM
Type: UNKNOWN
http://docs.info.apple.com/article.html?artnum=305214
Source: APPLE
Type: Patch, Vendor Advisory
APPLE-SA-2007-03-13
Source: CCN
Type: SA24479
Mac OS X Security Update Fixes Multiple Vulnerabilities
Source: SECUNIA
Type: UNKNOWN
24479
Source: CCN
Type: SECTRACK ID: 1017751
Mac OS X Lets Remote Users Execute Arbitrary Code and Local Users Obtain Elevated Privileges and Deny Service
Source: CCN
Type: Apple Mac OS X Web site
Apple - Mac OS X
Source: CCN
Type: US-CERT VU#557064
Apple Mac OS X DirectoryService may allow arbitrary users to change the root password
Source: CERT-VN
Type: US Government Resource
VU#557064
Source: OSVDB
Type: UNKNOWN
34848
Source: CCN
Type: OSVDB ID: 34848
Apple Mac OS X DirectoryService (DS Plug-Ins) Authentication Feature Remote Privilege Escalation
Source: BID
Type: UNKNOWN
22948
Source: CCN
Type: BID-22948
Apple Mac OS X Multiple Applications Multiple Vulnerabilities
Source: SECTRACK
Type: UNKNOWN
1017751
Source: CERT
Type: US Government Resource
TA07-072A
Source: VUPEN
Type: UNKNOWN
ADV-2007-0930
Source: XF
Type: UNKNOWN
macos-dsplugins-privilege-escalation(32971)
Vulnerable Configuration:
Configuration 1
:
cpe:/o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x:10.4:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x_server:10.4.8:*:*:*:*:*:*:*
Configuration CCN 1
:
cpe:/o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x:10.4:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x_server:10.4.8:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*
Denotes that component is vulnerable
BACK
apple
mac os x 10.3.9
apple
mac os x 10.4
apple
mac os x 10.4.1
apple
mac os x 10.4.2
apple
mac os x 10.4.3
apple
mac os x 10.4.4
apple
mac os x 10.4.5
apple
mac os x 10.4.6
apple
mac os x 10.4.7
apple
mac os x 10.4.8
apple
mac os x server 10.3.9
apple
mac os x server 10.4
apple
mac os x server 10.4.1
apple
mac os x server 10.4.2
apple
mac os x server 10.4.3
apple
mac os x server 10.4.4
apple
mac os x server 10.4.5
apple
mac os x server 10.4.6
apple
mac os x server 10.4.7
apple
mac os x server 10.4.8
apple
mac os x 10.3.9
apple
mac os x 10.4
apple
mac os x 10.4.1
apple
mac os x server 10.4.1
apple
mac os x server 10.4
apple
mac os x server 10.4.2
apple
mac os x 10.4.2
apple
mac os x 10.4.4
apple
mac os x 10.4.3
apple
mac os x server 10.4.3
apple
mac os x server 10.4.4
apple
mac os x 10.4.5
apple
mac os x server 10.4.5
apple
mac os x 10.4.6
apple
mac os x server 10.4.6
apple
mac os x 10.4.7
apple
mac os x server 10.4.7
apple
mac os x server 10.4.8
apple
mac os x 10.4.8