← Back

CVE-2007-4305

nvd nist
Published: Aug 13, 2007Modified: Apr 23, 2026

JSON object

Loading...
6.2
Vector
AV:L/AC:H/Au:N/C:C/I:C/A:C
Exploitability: 1.9 / Impact: 10.0
Source: NVD

Description

Multiple race conditions in the (1) Sudo monitor mode and (2) Sysjail policies in Systrace on NetBSD and OpenBSD allow local users to defeat system call interposition, and consequently bypass access control policy and auditing.

Affected (45)

Sysjail
1 product
Sysjail
Systrace
1 product
Systrace
Todd Miller
1 product
Sudo
Configuration A
45 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Sysjail
All versions
Systrace
All versions
Todd Miller
Sudo
Version 1.5.6
Sudo
Version 1.5.7
Sudo
Version 1.5.8
Sudo
Version 1.5.9
Sudo
Version 1.6.1
Sudo
Version 1.6.2
Sudo
Version 1.6.3
Sudo
Version 1.6.3_p1
Sudo
Version 1.6.3_p2
Sudo
Version 1.6.3_p3
Sudo
Version 1.6.3_p4
Sudo
Version 1.6.3_p5
Sudo
Version 1.6.3_p6
Sudo
Version 1.6.3_p7
Sudo
Version 1.6.3p1
Sudo
Version 1.6.3p2
Sudo
Version 1.6.3p3
Sudo
Version 1.6.3p4
Sudo
Version 1.6.3p5
Sudo
Version 1.6.3p6
Sudo
Version 1.6.3p7
Sudo
Version 1.6.4
Sudo
Version 1.6.4_p1
Sudo
Version 1.6.4_p2
Sudo
Version 1.6.4p1
Sudo
Version 1.6.4p2
Sudo
Version 1.6.5
Sudo
Version 1.6.5_p1
Sudo
Version 1.6.5_p2
Sudo
Version 1.6.5p1
Sudo
Version 1.6.5p2
Sudo
Version 1.6.6
Sudo
Version 1.6.7
Sudo
Version 1.6.7_p5
Sudo
Version 1.6.8
Sudo
Version 1.6.8_p12
Sudo
Version 1.6.8_p1
Sudo
Version 1.6.8_p2
Sudo
Version 1.6.8_p5
Sudo
Version 1.6.8_p7
Sudo
Version 1.6.8_p8
Sudo
Version 1.6.8_p9
Sudo
Version 1.6
Running on/withPlatform Versions
Netbsd
Netbsd
All versions
Openbsd
Openbsd
All versions

References (6)

Source: cve@mitre.org
Source: cve@mitre.org
Exploit
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.