Description
Format string vulnerability in Point-to-Point Protocol (PPP) daemon (pppd) 2.4.0 for Mac OS X 10.3.2 and earlier allows remote attackers to read arbitrary pppd process data, including PAP or CHAP authentication credentials, to gain privileges.
References
- APPLE-SA-2004-02-23 vendor-advisory
- macos-pppd-format-string(15297) vdb-entry
- VU#841742 third-party-advisory
- 6822 vdb-entry
- 9730 vdb-entry
- A022304-1 vendor-advisory