CVE-2007-0753

Name of the Vulnerable Software and Affected Versions Mac OS X versions 10.3.9 through 10.4.9

Description A format string issue in the VPN daemon allows local users to execute arbitrary code via the -i parameter, specifically the username variable. This could potentially lead to unauthorized access and code execution.

Recommendations For Mac OS X versions 10.3.9 through 10.4.9, avoid using the -i parameter in the VPN daemon until a fix is available. As a temporary workaround, consider restricting access to the VPN daemon to minimize the risk of exploitation.