6.2med
CVE-2007-43051 exploit
Multiple race conditions in the (1) Sudo monitor mode and (2) Sysjail policies in Systrace on NetBSD and OpenBSD allow local users to defea…
Published 19 y ago · modified 4 mo ago · JSON
CVSS
6.2
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.9%
percentile 59%
Public exploits
1
Exploit-DB
Summary
Multiple race conditions in the (1) Sudo monitor mode and (2) Sysjail policies in Systrace on NetBSD and OpenBSD allow local users to defeat system call interposition, and consequently bypass access control policy and auditing.
Exploit prediction (EPSS)
0.86% probability of exploitation in the next 30 days, higher than 59% of all scored CVEs.
Exploits and detections
- EDB-30484 Systrace - Multiple System Call Wrappers Concurrency Vulnerabilities · local · 2007-08-09
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 6.2 | AV:L/AC:H/Au:N/C:C/I:C/A:C |
References
- secunia.com /advisories/26479 · third-party-advisory, x_refsource_SECUNIA, x_transferred
- watson.org /~robert/2007woot/ · x_refsource_MISC, x_transferred
- securityfocus.com /bid/25258 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2007-4305
- NVD: CVE-2007-4305
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.