CVE-2007-0723 Privilege escalation in n/a

High 8.5 Published Updated

Authenticated LDAP users can modify the root password and gain elevated privileges on affected macOS versions.

Exploited in the wild
Not known
Login needed
Any signed-in user
Attackable
Over the internet
Victim action needed
Not needed
Fix
None listed

What is CVE-2007-0723?

CVE-2007-0723 is a high-severity vulnerability in Apple Mac Os X, published on 13 Mar 2007. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Unspecified vulnerability in the authentication feature for DirectoryService (DS Plug-Ins) for Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remote authenticated LDAP users to modify the root password and gain privileges via unknown vectors.

Which versions are affected by CVE-2007-0723?

It affects 2 products.

Products include Apple Mac Os X, Apple Mac Os X Server.

How do I fix CVE-2007-0723?

No fix has been published for CVE-2007-0723 yet. Limit exposure of the affected software until one is available.

Is CVE-2007-0723 being exploited?

There is no known exploitation of CVE-2007-0723 in the wild and no public exploit code.

All Apple Mac Os X vulnerabilities

Sources

Also known as GHSA-6hqm-c4gx-p73p.

Is CVE-2007-0723 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free