ISOMAN

CVE

CVE-2007-4305

Multiple race conditions in the (1) Sudo monitor mode and (2) Sysjail policies in Systrace on NetBSD and OpenBSD allow local users to defeat system call interposition, and consequently bypass access control policy and auditing.

Severity
MEDIUM
CVSS
6.2
Published
Modified

Linked Releases

DistributionReleaseStatusEvidence
OpenBSD7.9 alpha boot-cdunknownsource
OpenBSD7.9 alpha installunknownsource
OpenBSD7.9 alpha minirootunknownsource
OpenBSD7.9 amd64 boot-cdunknownsource
OpenBSD7.9 amd64 floppyunknownsource
OpenBSD7.9 amd64 installunknownsource
OpenBSD7.9 amd64 minirootunknownsource
OpenBSD7.9 arm64 boot-cdunknownsource
OpenBSD7.9 arm64 installunknownsource
OpenBSD7.9 arm64 minirootunknownsource
OpenBSD7.9 armv7 minirootunknownsource
OpenBSD7.9 hppa boot-cdunknownsource
OpenBSD7.9 hppa installunknownsource
OpenBSD7.9 hppa lifunknownsource
OpenBSD7.9 i386 boot-cdunknownsource
OpenBSD7.9 i386 floppyunknownsource
OpenBSD7.9 i386 installunknownsource
OpenBSD7.9 i386 minirootunknownsource
OpenBSD7.9 landisk minirootunknownsource
OpenBSD7.9 loongson boot-cdunknownsource
OpenBSD7.9 loongson minirootunknownsource
OpenBSD7.9 luna88k minirootunknownsource
OpenBSD7.9 macppc boot-cdunknownsource
OpenBSD7.9 macppc installunknownsource
OpenBSD7.9 octeon installunknownsource
OpenBSD7.9 octeon minirootunknownsource
OpenBSD7.9 powerpc64 installunknownsource
OpenBSD7.9 powerpc64 minirootunknownsource
OpenBSD7.9 riscv64 installunknownsource
OpenBSD7.9 riscv64 minirootunknownsource
OpenBSD7.9 sparc64 boot-cdunknownsource
OpenBSD7.9 sparc64 floppyunknownsource
OpenBSD7.9 sparc64 floppy-bunknownsource
OpenBSD7.9 sparc64 installunknownsource
OpenBSD7.9 sparc64 minirootunknownsource
NetBSD10.1 acorn32 installunknownsource
NetBSD10.1 alpha installunknownsource
NetBSD10.1 amd64 bios-installunknownsource
NetBSD10.1 amd64 installunknownsource
NetBSD10.1 amd64 liveunknownsource
NetBSD10.1 amiga installunknownsource
NetBSD10.1 arc installunknownsource
NetBSD10.1 atari installunknownsource
NetBSD10.1 cats installunknownsource
NetBSD10.1 cobalt installunknownsource
NetBSD10.1 dreamcast installunknownsource
NetBSD10.1 emips installunknownsource
NetBSD10.1 evbarm-aarch64 installunknownsource
NetBSD10.1 evbarm-aarch64eb installunknownsource
NetBSD10.1 evbmips-mips64eb installunknownsource
NetBSD10.1 evbmips-mips64el installunknownsource
NetBSD10.1 evbmips-mipseb installunknownsource
NetBSD10.1 evbmips-mipsel installunknownsource
NetBSD10.1 evbmips-mipsn64eb installunknownsource
NetBSD10.1 evbmips-mipsn64el installunknownsource
NetBSD10.1 evbppc installunknownsource
NetBSD10.1 evbsh3-sh3eb installunknownsource
NetBSD10.1 evbsh3-sh3el installunknownsource
NetBSD10.1 ews4800mips installunknownsource
NetBSD10.1 hp300 installunknownsource
NetBSD10.1 hpcarm installunknownsource
NetBSD10.1 hpcmips installunknownsource
NetBSD10.1 hpcsh installunknownsource
NetBSD10.1 hppa installunknownsource
NetBSD10.1 i386 installunknownsource
NetBSD10.1 ia64 installunknownsource
NetBSD10.1 ibmnws installunknownsource
NetBSD10.1 luna68k installunknownsource
NetBSD10.1 mac68k installunknownsource
NetBSD10.1 macppc installunknownsource
NetBSD10.1 mipsco installunknownsource
NetBSD10.1 mvme68k installunknownsource
NetBSD10.1 mvmeppc installunknownsource
NetBSD10.1 news68k installunknownsource
NetBSD10.1 newsmips installunknownsource
NetBSD10.1 next68k installunknownsource
NetBSD10.1 ofppc installunknownsource
NetBSD10.1 pmax installunknownsource
NetBSD10.1 prep installunknownsource
NetBSD10.1 sandpoint installunknownsource
NetBSD10.1 sgimips installunknownsource
NetBSD10.1 shark installunknownsource
NetBSD10.1 sparc installunknownsource
NetBSD10.1 sparc64 installunknownsource
NetBSD10.1 sun2 installunknownsource
NetBSD10.1 sun3 installunknownsource
NetBSD10.1 vax installunknownsource
NetBSD10.1 x68k installunknownsource
NetBSD10.1 zaurus installunknownsource
NetBSD10.1 amd64 boot-comunknownsource
NetBSD10.1 amd64 bootunknownsource
NetBSD10.1 i386 boot-comunknownsource
NetBSD10.1 i386 bootunknownsource

References

  1. http://secunia.com/advisories/26479
  2. http://www.securityfocus.com/bid/25258
  3. http://www.watson.org/~robert/2007woot/
  4. http://secunia.com/advisories/26479
  5. http://www.securityfocus.com/bid/25258
  6. http://www.watson.org/~robert/2007woot/