CVE-2007-4305 Multiple race conditions in the (1) Sudo monitor mode and (2) Sysjail policies in Systrace on NetBSD and OpenBSD allow local users to defeat system call interposition, and consequently bypass access c...
MediumCVSS 6.2
EPSS 0.86%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple race conditions in the (1) Sudo monitor mode and (2) Sysjail policies in Systrace on NetBSD and OpenBSD allow local users to defeat system call interposition, and consequently bypass access control policy and auditing.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sysjail | All versions | No fix listed |
| systrace | All versions | No fix listed |
| todd miller sudo | = 1.5.6 | No fix listed |
| todd miller sudo | = 1.5.7 | No fix listed |
| todd miller sudo | = 1.5.8 | No fix listed |
| todd miller sudo | = 1.5.9 | No fix listed |
| todd miller sudo | = 1.6 | No fix listed |
| todd miller sudo | = 1.6.1 | No fix listed |
| todd miller sudo | = 1.6.2 | No fix listed |
| todd miller sudo | = 1.6.3 | No fix listed |
| todd miller sudo | = 1.6.3_p1 | No fix listed |
| todd miller sudo | = 1.6.3_p2 | No fix listed |
| todd miller sudo | = 1.6.3_p3 | No fix listed |
| todd miller sudo | = 1.6.3_p4 | No fix listed |
| todd miller sudo | = 1.6.3_p5 | No fix listed |
| todd miller sudo | = 1.6.3_p6 | No fix listed |
| todd miller sudo | = 1.6.3_p7 | No fix listed |
| todd miller sudo | = 1.6.3p1 | No fix listed |
| todd miller sudo | = 1.6.3p2 | No fix listed |
| todd miller sudo | = 1.6.3p3 | No fix listed |
| todd miller sudo | = 1.6.3p4 | No fix listed |
| todd miller sudo | = 1.6.3p5 | No fix listed |
| todd miller sudo | = 1.6.3p6 | No fix listed |
| todd miller sudo | = 1.6.3p7 | No fix listed |
| todd miller sudo | = 1.6.4 | No fix listed |
Show 20 more
| Product | Affected versions | Fixed in |
|---|---|---|
| todd miller sudo | = 1.6.4_p1 | No fix listed |
| todd miller sudo | = 1.6.4_p2 | No fix listed |
| todd miller sudo | = 1.6.4p1 | No fix listed |
| todd miller sudo | = 1.6.4p2 | No fix listed |
| todd miller sudo | = 1.6.5 | No fix listed |
| todd miller sudo | = 1.6.5_p1 | No fix listed |
| todd miller sudo | = 1.6.5_p2 | No fix listed |
| todd miller sudo | = 1.6.5p1 | No fix listed |
| todd miller sudo | = 1.6.5p2 | No fix listed |
| todd miller sudo | = 1.6.6 | No fix listed |
| todd miller sudo | = 1.6.7 | No fix listed |
| todd miller sudo | = 1.6.7_p5 | No fix listed |
| todd miller sudo | = 1.6.8 | No fix listed |
| todd miller sudo | = 1.6.8_p1 | No fix listed |
| todd miller sudo | = 1.6.8_p2 | No fix listed |
| todd miller sudo | = 1.6.8_p5 | No fix listed |
| todd miller sudo | = 1.6.8_p7 | No fix listed |
| todd miller sudo | = 1.6.8_p8 | No fix listed |
| todd miller sudo | = 1.6.8_p9 | No fix listed |
| todd miller sudo | = 1.6.8_p12 | No fix listed |
References
- 26479 third-party-advisory
- 25258 exploit vdb-entry
- www.watson.org