6.2

CVE-2007-4305

Exploit

Multiple race conditions in the (1) Sudo monitor mode and (2) Sysjail policies in Systrace on NetBSD and OpenBSD allow local users to defeat system call interposition, and consequently bypass access control policy and auditing.

Data is provided by the National Vulnerability Database (NVD)
Sysjail ≫ Sysjail
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Systrace ≫ Systrace
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.5.6
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.5.7
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.5.8
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.5.9
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.1
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.2
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.3
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.3_p1
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.3_p2
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.3_p3
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.3_p4
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.3_p5
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.3_p6
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.3_p7
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.3p1
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.3p2
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.3p3
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.3p4
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.3p5
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.3p6
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.3p7
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.4
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.4_p1
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.4_p2
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.4p1
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.4p2
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.5
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.5_p1
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.5_p2
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.5p1
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.5p2
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.6
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.7
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.7_p5
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.8
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.8_p1
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.8_p2
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.8_p5
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.8_p7
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.8_p8
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.8_p9
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.8_p12
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.12% 0.275
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.2 1.9 10
AV:L/AC:H/Au:N/C:C/I:C/A:C