CVE-2007-0355

EPSS 6.6%

Buffer overflow in the Apple Minimal SLP v2 Service Agent (slpd) in Mac OS X 10.4.11 and earlier, including 10.4.8, allows local users, and possibly remote attackers, to gain privileges and possibly execute arbitrary code via a registration request with an invalid attr-list field.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/3151unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://docs.info.apple.com/article.html?artnum=307430 http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html http://projects.info-pull.com/moab/MOAB-17-01-2007.html http://secunia.com/advisories/23796 http://securitytracker.com/id?1017533 http://securitytracker.com/id?1019359 https://exchange.xforce.ibmcloud.com/vulnerabilities/31562 https://www.exploit-db.com/exploits/3151 http://www.osvdb.org/32693 http://www.securityfocus.com/bid/22101 http://www.us-cert.gov/cas/techalerts/TA08-043B.html http://www.vupen.com/english/advisories/2007/0239