CVE-2007-0726
Summary
| CVE | CVE-2007-0726 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2007-03-13 22:19:00 UTC |
| Updated | 2026-04-23 00:35:47 UTC |
| Description | The SSH key generation process in OpenSSH in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remote attackers to cause a denial of service by connecting to the server before SSH has finished creating keys, which causes the keys to be regenerated and can break trust relationships that were based on the original keys. |
Risk And Classification
Primary CVSS: v2.0 5 from [email protected]
AV:N/AC:L/Au:N/C:N/I:N/A:P
Problem Types: NVD-CWE-Other | n/a
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
NoneIntegrity
NoneAvailability
PartialAV:N/AC:L/Au:N/C:N/I:N/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Apple | Mac Os X | 10.3.9 | All | All | All |
| Operating System | Apple | Mac Os X | 10.4 | All | All | All |
| Operating System | Apple | Mac Os X | 10.4.1 | All | All | All |
| Operating System | Apple | Mac Os X | 10.4.2 | All | All | All |
| Operating System | Apple | Mac Os X | 10.4.3 | All | All | All |
| Operating System | Apple | Mac Os X | 10.4.4 | All | All | All |
| Operating System | Apple | Mac Os X | 10.4.5 | All | All | All |
| Operating System | Apple | Mac Os X | 10.4.6 | All | All | All |
| Operating System | Apple | Mac Os X | 10.4.7 | All | All | All |
| Operating System | Apple | Mac Os X | 10.4.8 | All | All | All |
| Operating System | Apple | Mac Os X Server | 10.3.9 | All | All | All |
| Operating System | Apple | Mac Os X Server | 10.4 | All | All | All |
| Operating System | Apple | Mac Os X Server | 10.4.1 | All | All | All |
| Operating System | Apple | Mac Os X Server | 10.4.2 | All | All | All |
| Operating System | Apple | Mac Os X Server | 10.4.3 | All | All | All |
| Operating System | Apple | Mac Os X Server | 10.4.4 | All | All | All |
| Operating System | Apple | Mac Os X Server | 10.4.5 | All | All | All |
| Operating System | Apple | Mac Os X Server | 10.4.6 | All | All | All |
| Operating System | Apple | Mac Os X Server | 10.4.7 | All | All | All |
| Operating System | Apple | Mac Os X Server | 10.4.8 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| APPLE-SA-2007-03-13 Mac OS X v10.4.9 and Security Update 2007-003 | af854a3a-2127-422b-91ae-364da2661108 | lists.apple.com | Patch, Vendor Advisory |
| Webmail - OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| US-CERT Technical Cyber Security Alert TA07-072A -- Apple Updates for Multiple Vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | www.us-cert.gov | US Government Resource |
| Mac OS X Security Update Fixes Multiple Vulnerabilities - Advisories - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| About the security content of Mac OS X 10.4.9 and Security Update 2007-003 | af854a3a-2127-422b-91ae-364da2661108 | docs.info.apple.com | |
| Apple OpenSSH Key Generation Process Lets Remote Users Deny Service - SecurityTracker | af854a3a-2127-422b-91ae-364da2661108 | www.securitytracker.com | |
| www.osvdb.org/34850 | af854a3a-2127-422b-91ae-364da2661108 | www.osvdb.org | |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| Apple Mac OS X Multiple Applications Multiple Vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.