6.2

CVE-2007-4305

Exploit
Multiple race conditions in the (1) Sudo monitor mode and (2) Sysjail policies in Systrace on NetBSD and OpenBSD allow local users to defeat system call interposition, and consequently bypass access control policy and auditing.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sysjail ≫ Sysjail
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Systrace ≫ Systrace
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version 1.5.6
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version 1.5.7
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version 1.5.8
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version 1.5.9
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version 1.6
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version 1.6.1
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version 1.6.2
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version 1.6.3
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version 1.6.3_p1
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version 1.6.3_p2
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version 1.6.3_p3
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version 1.6.3_p4
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version 1.6.3_p5
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version 1.6.3_p6
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version 1.6.3_p7
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version 1.6.3p1
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version 1.6.3p2
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version 1.6.3p3
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version 1.6.3p4
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version 1.6.3p5
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version 1.6.3p6
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version 1.6.3p7
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version 1.6.4
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version 1.6.4_p1
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version 1.6.4_p2
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version 1.6.4p1
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version 1.6.4p2
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version 1.6.5
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version 1.6.5_p1
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version 1.6.5_p2
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version 1.6.5p1
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version 1.6.5p2
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version 1.6.6
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version 1.6.7
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version 1.6.7_p5
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version 1.6.8
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version 1.6.8_p1
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version 1.6.8_p2
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version 1.6.8_p5
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version 1.6.8_p7
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version 1.6.8_p8
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version 1.6.8_p9
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version 1.6.8_p12
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.86% 0.537
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.2 1.9 10
AV:L/AC:H/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.watson.org/~robert/2007woot/
http://secunia.com/advisories/26479
http://www.securityfocus.com/bid/25258
Exploit