CVE-2009-0342 Niels Provos Systrace before 1.6f on the x86_64 Linux platform allows local users to bypass intended access restrictions by making a 64-bit syscall with a syscall number that corresponds to a policy-c...
HighCVSS 7.2
EPSS 0.45%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Niels Provos Systrace before 1.6f on the x86_64 Linux platform allows local users to bypass intended access restrictions by making a 64-bit syscall with a syscall number that corresponds to a policy-compliant 32-bit syscall.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| provos systrace | <= 1.6e | No fix listed |
| provos systrace | = 1.1 | No fix listed |
| provos systrace | = 1.2 | No fix listed |
| provos systrace | = 1.3 | No fix listed |
| provos systrace | = 1.4 | No fix listed |
| provos systrace | = 1.5 | No fix listed |
| provos systrace | = 1.6 | No fix listed |
| provos systrace | = 1.6a | No fix listed |
| provos systrace | = 1.6b | No fix listed |
| provos systrace | = 1.6c | No fix listed |
| provos systrace | = 1.6d | No fix listed |
References
- scary.beasts.org exploit
- scarybeastsecurity.blogspot.com
- www.citi.umich.edu
- 20090123 Problems with syscall filtering technologies on Linux mailing-list
- 33417 exploit vdb-entry