CVE-2007-6276

The accept_connections function in the virtual private network daemon (vpnd) in Apple Mac OS X 10.5 before 10.5.4 allows remote attackers to cause a denial of service (divide-by-zero error and daemon crash) via a crafted load balancing packet to UDP port 4112.

• CWE-189

• http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html
• http://secunia.com/advisories/27938Vendor Advisory
• http://secunia.com/advisories/30802Vendor Advisory
• http://support.apple.com/kb/HT2163Vendor Advisory
• http://www.securityfocus.com/bid/26699Exploit
• http://www.securitytracker.com/id?1019052
• http://www.vupen.com/english/advisories/2007/4145Vendor Advisory
• http://www.vupen.com/english/advisories/2008/1981/referencesVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38855
• https://www.exploit-db.com/exploits/4690
• http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html
• http://secunia.com/advisories/27938Vendor Advisory
• http://secunia.com/advisories/30802Vendor Advisory
• http://support.apple.com/kb/HT2163Vendor Advisory
• http://www.securityfocus.com/bid/26699Exploit
• http://www.securitytracker.com/id?1019052
• http://www.vupen.com/english/advisories/2007/4145Vendor Advisory
• http://www.vupen.com/english/advisories/2008/1981/referencesVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38855
• https://www.exploit-db.com/exploits/4690

Published

Dec 7, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-6270Multiple cross-site scripting (XSS) vulnerabilities in Absol…
• CVE-2007-6271Absolute News Manager.NET 5.1 allows remote attackers to obt…
• CVE-2007-6272Multiple SQL injection vulnerabilities in index.php in Jooml…
• CVE-2007-6273Multiple format string vulnerabilities in the configuration …
• CVE-2007-6274Multiple cross-site scripting (XSS) vulnerabilities in modul…
• CVE-2007-6275SQL injection vulnerability in modules/adresses/ratefile.php…
• CVE-2007-6277Multiple buffer overflows in Free Lossless Audio Codec (FLAC…
• CVE-2007-6278Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allows…
• CVE-2007-6279Multiple double free vulnerabilities in Free Lossless Audio …
• CVE-2007-6281Heap-based buffer overflow in Open File Manager service (ofm…
• CVE-2007-6282The IPsec implementation in Linux kernel before 2.6.25 allow…
• CVE-2007-6283Red Hat Enterprise Linux 5 and Fedora install the Bind /etc/…