CVE-2007-0726
Last modified
CVE-2007-0726 is a vulnerability of currently unknown severity. The SSH key generation process in OpenSSH in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remote attackers to cause a denial of service by connecting to the server before SSH has finished creating keys, which causes the keys to be regenerated and can break trust relationships that were based on the original keys.. EPSS estimates a 3.87% chance of exploitation in the next 30 days.
Description
The SSH key generation process in OpenSSH in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remote attackers to cause a denial of service by connecting to the server before SSH has finished creating keys, which causes the keys to be regenerated and can break trust relationships that were based on the original keys.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Apple | Mac Os X | 10.3.9 |
| Apple | Mac Os X | 10.4 |
| Apple | Mac Os X | 10.4.1 |
| Apple | Mac Os X | 10.4.2 |
| Apple | Mac Os X | 10.4.3 |
| Apple | Mac Os X | 10.4.4 |
| Apple | Mac Os X | 10.4.5 |
| Apple | Mac Os X | 10.4.6 |
| Apple | Mac Os X | 10.4.7 |
| Apple | Mac Os X | 10.4.8 |
| Apple | Mac Os X Server | 10.3.9 |
| Apple | Mac Os X Server | 10.4 |
| Apple | Mac Os X Server | 10.4.1 |
| Apple | Mac Os X Server | 10.4.2 |
| Apple | Mac Os X Server | 10.4.3 |
| Apple | Mac Os X Server | 10.4.4 |
| Apple | Mac Os X Server | 10.4.5 |
| Apple | Mac Os X Server | 10.4.6 |
| Apple | Mac Os X Server | 10.4.7 |
| Apple | Mac Os X Server | 10.4.8 |
References
- http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.htmlPatch, Vendor Advisory
- http://www.us-cert.gov/cas/techalerts/TA07-072A.htmlUS Government Resource
- http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.htmlPatch, Vendor Advisory
- http://www.us-cert.gov/cas/techalerts/TA07-072A.htmlUS Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-0726?
How severe is CVE-2007-0726?
How do I fix CVE-2007-0726?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2007
- CVE-2007-0720The CUPS service on multiple platforms allows remote attacke…
- CVE-2007-0721Unspecified vulnerability in diskimages-helper in Apple Mac …
- CVE-2007-0722Integer overflow in Apple Mac OS X 10.3.9 and 10.4 through 1…
- CVE-2007-0723Unspecified vulnerability in the authentication feature for …
- CVE-2007-0724The IOKit HID interface in Apple Mac OS X 10.3.9 and 10.4 th…
- CVE-2007-0725Buffer overflow in the AirPortDriver module for AirPort in A…
- CVE-2007-0727Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2007-0728Unspecified vulnerability in Apple Mac OS X 10.3.9 and 10.4 …
- CVE-2007-0729Apple File Protocol (AFP) Client in Apple Mac OS X 10.3.9 th…
- CVE-2007-0730Server Manager (servermgrd) in Apple Mac OS X 10.3.9 and 10.…
- CVE-2007-0731Stack-based buffer overflow in the Apple-specific Samba modu…
- CVE-2007-0732Unspecified vulnerability in the CoreServices daemon in Carb…
Are you affected by CVE-2007-0726?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
