CVEvulnerability

CVE-2007-4305

6.2 MEDIUM Published 2007-08-13 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-08-13
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.2 MEDIUM — AV:L/AC:H/Au:N/C:C/I:C/A:C

Description

Multiple race conditions in the (1) Sudo monitor mode and (2) Sysjail policies in Systrace on NetBSD and OpenBSD allow local users to defeat system call interposition, and consequently bypass access control policy and auditing.

Affected configurations

• sysjail sysjail • systrace systrace • todd miller sudo 1.5.6 • todd miller sudo 1.5.7 • todd miller sudo 1.5.8 • todd miller sudo 1.5.9 • todd miller sudo 1.6 • todd miller sudo 1.6.1 • todd miller sudo 1.6.2 • todd miller sudo 1.6.3 • todd miller sudo 1.6.3 p1 • todd miller sudo 1.6.3 p2 • todd miller sudo 1.6.3 p3 • todd miller sudo 1.6.3 p4 • todd miller sudo 1.6.3 p5 • todd miller sudo 1.6.3 p6 • todd miller sudo 1.6.3 p7 • todd miller sudo 1.6.3p1 • todd miller sudo 1.6.3p2 • todd miller sudo 1.6.3p3 • todd miller sudo 1.6.3p4 • todd miller sudo 1.6.3p5 • todd miller sudo 1.6.3p6 • todd miller sudo 1.6.3p7 • todd miller sudo 1.6.4 • todd miller sudo 1.6.4 p1 • todd miller sudo 1.6.4 p2 • todd miller sudo 1.6.4p1 • todd miller sudo 1.6.4p2 • todd miller sudo 1.6.5 • todd miller sudo 1.6.5 p1 • todd miller sudo 1.6.5 p2 • todd miller sudo 1.6.5p1 • todd miller sudo 1.6.5p2 • todd miller sudo 1.6.6 • todd miller sudo 1.6.7 • todd miller sudo 1.6.7 p5 • todd miller sudo 1.6.8 • todd miller sudo 1.6.8 p1 • todd miller sudo 1.6.8 p2 • todd miller sudo 1.6.8 p5 • todd miller sudo 1.6.8 p7 • todd miller sudo 1.6.8 p8 • todd miller sudo 1.6.8 p9 • todd miller sudo 1.6.8 p12

References