CVE-2007-0734

fsck, as used by the AirPort Disk feature of the AirPort Extreme Base Station with 802.11n before Firmware Update 7.1, and by Apple Mac OS X 10.3.9 through 10.4.9, does not properly enforce password protection of a USB hard drive, which allows context-dependent attackers to list arbitrary directories or execute arbitrary code, resulting from memory corruption.

• CWE-119

• http://docs.info.apple.com/article.html?artnum=305366Patch, Vendor Advisory
• http://docs.info.apple.com/article.html?artnum=305391
• http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html
• http://lists.apple.com/archives/security-announce/2007/Apr/msg00000.htmlVendor Advisory
• http://secunia.com/advisories/24830Vendor Advisory
• http://secunia.com/advisories/24966Vendor Advisory
• http://www.securityfocus.com/bid/23396
• http://www.securityfocus.com/bid/23569
• http://www.securitytracker.com/id?1017889
• http://www.securitytracker.com/id?1017942
• http://www.us-cert.gov/cas/techalerts/TA07-109A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2007/1308Vendor Advisory
• http://www.vupen.com/english/advisories/2007/1470Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33527
• http://docs.info.apple.com/article.html?artnum=305366Patch, Vendor Advisory
• http://docs.info.apple.com/article.html?artnum=305391
• http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html
• http://lists.apple.com/archives/security-announce/2007/Apr/msg00000.htmlVendor Advisory
• http://secunia.com/advisories/24830Vendor Advisory
• http://secunia.com/advisories/24966Vendor Advisory
• http://www.securityfocus.com/bid/23396
• http://www.securityfocus.com/bid/23569
• http://www.securitytracker.com/id?1017889
• http://www.securitytracker.com/id?1017942
• http://www.us-cert.gov/cas/techalerts/TA07-109A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2007/1308Vendor Advisory
• http://www.vupen.com/english/advisories/2007/1470Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33527

Published

Apr 10, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-0728Unspecified vulnerability in Apple Mac OS X 10.3.9 and 10.4 …
• CVE-2007-0729Apple File Protocol (AFP) Client in Apple Mac OS X 10.3.9 th…
• CVE-2007-0730Server Manager (servermgrd) in Apple Mac OS X 10.3.9 and 10.…
• CVE-2007-0731Stack-based buffer overflow in the Apple-specific Samba modu…
• CVE-2007-0732Unspecified vulnerability in the CoreServices daemon in Carb…
• CVE-2007-0733Unspecified vulnerability in ImageIO in Apple Mac OS X 10.3.…
• CVE-2007-0735Use-after-free vulnerability in Libinfo in Apple Mac OS X 10…
• CVE-2007-0736Integer overflow in the RPC library in Libinfo in Apple Mac …
• CVE-2007-0737The Login Window in Apple Mac OS X 10.3.9 through 10.4.9 doe…
• CVE-2007-0738The Login Window in Apple Mac OS X 10.4 through 10.4.9 does …
• CVE-2007-0739The Login Window in Apple Mac OS X 10.4 through 10.4.9 displ…
• CVE-2007-0740Alias Manager in Apple Mac OS X 10.3.9 and 10.4.9 does not d…