CVE-2007-6276

Name: CVE-2007-6276
Creator: NVD / NIST
Published: 2007-12-07T11:46:00+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 9.15%

Last modified Jun 16, 2026

CVE-2007-6276 is a vulnerability of currently unknown severity. The accept_connections function in the virtual private network daemon (vpnd) in Apple Mac OS X 10.5 before 10.5.4 allows remote attackers to cause a denial of service (divide-by-zero error and daemon crash) via a crafted load balancing packet to UDP port 4112.. EPSS estimates a 9.15% chance of exploitation in the next 30 days.

Description

The accept_connections function in the virtual private network daemon (vpnd) in Apple Mac OS X 10.5 before 10.5.4 allows remote attackers to cause a denial of service (divide-by-zero error and daemon crash) via a crafted load balancing packet to UDP port 4112.

Metrics

EPSS Probability

9.15%

94.7th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-189

Affected Software

Vendor	Product	Versions
Apple	Mac Os X	10.5
Apple	Mac Os X	10.5.1
Apple	Mac Os X	10.5.2
Apple	Mac Os X	10.5.3
Apple	Mac Os X Server	10.5
Apple	Mac Os X Server	10.5.1
Apple	Mac Os X Server	10.5.2
Apple	Mac Os X Server	10.5.3

References

http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html
http://secunia.com/advisories/27938Vendor Advisory
http://secunia.com/advisories/30802Vendor Advisory
http://support.apple.com/kb/HT2163Vendor Advisory
http://www.securityfocus.com/bid/26699Exploit
http://www.securitytracker.com/id?1019052
http://www.vupen.com/english/advisories/2007/4145Vendor Advisory
http://www.vupen.com/english/advisories/2008/1981/referencesVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/38855
https://www.exploit-db.com/exploits/4690
http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html
http://secunia.com/advisories/27938Vendor Advisory
http://secunia.com/advisories/30802Vendor Advisory
http://support.apple.com/kb/HT2163Vendor Advisory
http://www.securityfocus.com/bid/26699Exploit
http://www.securitytracker.com/id?1019052
http://www.vupen.com/english/advisories/2007/4145Vendor Advisory
http://www.vupen.com/english/advisories/2008/1981/referencesVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/38855
https://www.exploit-db.com/exploits/4690

Timeline

Published: Dec 7, 2007
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2007-6276?

How severe is CVE-2007-6276?

Severity scoring for CVE-2007-6276 is pending analysis. The EPSS model estimates a 9.15% probability of exploitation in the next 30 days.

How do I fix CVE-2007-6276?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2007-6276?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST