6.2

CVE-2007-4305

Exploit
Multiple race conditions in the (1) Sudo monitor mode and (2) Sysjail policies in Systrace on NetBSD and OpenBSD allow local users to defeat system call interposition, and consequently bypass access control policy and auditing.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sysjail ≫ Sysjail
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Systrace ≫ Systrace
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.5.6
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.5.7
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.5.8
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.5.9
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.1
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.2
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.3
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.3_p1
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.3_p2
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.3_p3
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.3_p4
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.3_p5
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.3_p6
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.3_p7
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.3p1
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.3p2
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.3p3
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.3p4
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.3p5
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.3p6
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.3p7
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.4
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.4_p1
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.4_p2
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.4p1
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.4p2
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.5
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.5_p1
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.5_p2
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.5p1
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.5p2
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.6
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.7
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.7_p5
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.8
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.8_p1
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.8_p2
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.8_p5
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.8_p7
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.8_p8
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.8_p9
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Todd Miller ≫ Sudo Version1.6.8_p12
   Netbsd ≫ Netbsd
   Openbsd ≫ Openbsd
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.86% 0.537
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.2 1.9 10
AV:L/AC:H/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.watson.org/~robert/2007woot/
http://secunia.com/advisories/26479
http://www.securityfocus.com/bid/25258
Exploit