CVE-2007-0752
HIGH · CVSS 7.2EPSS 0.7%EU EUVD
The PPP daemon (pppd) in Apple Mac OS X 10.4.8 checks ownership of the stdin file descriptor to determine if the invoker has sufficient privileges, which allows local users to load arbitrary plugins and gain root privileges by bypassing this check.
Key facts
- CVSS score
- 7.2 (v2.0)
- Severity
- HIGH
- CVSS vector
AV:L/AC:L/Au:N/C:C/I:C/A:C- EPSS score
- 0.7% (54th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2007-0749)
- Published
- May 24, 2007
- NVD last modified
- June 16, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2007-0749 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.
View on the EU Vulnerability DatabaseAffected products
- apple / mac os x
- apple / mac os x server
References
- http://docs.info.apple.com/article.html?artnum=305530
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=537(Vendor Advisory)
- http://lists.apple.com/archives/security-announce/2007/May/msg00004.html
- http://secunia.com/advisories/25402
- http://www.osvdb.org/35144
- http://www.securityfocus.com/bid/24144
- http://www.securitytracker.com/id?1018124
- http://www.vupen.com/english/advisories/2007/1939
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34503
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain