CVE-2007-4305

Multiple race conditions in the (1) Sudo monitor mode and (2) Sysjail policies in Systrace on NetBSD and OpenBSD allow local users to defeat system call interposition, and consequently bypass access control policy and auditing.

CVSS v2.0

6.2 MEDIUMAV:L/AC:H/Au:N/C:C/I:C/A:C

EPSS

0.86% chance of exploitation in the next 30 days, 56th percentile

Published

2007-08-13

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/30484

References

• CVE Record
• NVD entry

Related

• CVE-2007-4302
• CVE-2007-4312
• CVE-2007-4288
• CVE-2007-4313
• CVE-2007-4287
• CVE-2007-4314