CVEvulnerability
CVE-2009-0342
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-01-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
Niels Provos Systrace before 1.6f on the x86_64 Linux platform allows local users to bypass intended access restrictions by making a 64-bit syscall with a syscall number that corresponds to a policy-compliant 32-bit syscall.
Affected configurations
• provos systrace (<= 1.6e)
• provos systrace 1.1
• provos systrace 1.2
• provos systrace 1.3
• provos systrace 1.4
• provos systrace 1.5
• provos systrace 1.6
• provos systrace 1.6a
• provos systrace 1.6b
• provos systrace 1.6c
• provos systrace 1.6d
Related
Weakness · not in database (1)
References
- http://scary.beasts.org/security/CESA-2009-001.html Exploit
- http://scarybeastsecurity.blogspot.com/2009/01/bypassing-syscall-filtering.html scarybeastsecurity.blogspot.com
- http://www.citi.umich.edu/u/provos/systrace/ www.citi.umich.edu
- http://www.securityfocus.com/archive/1/500377/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/33417 Exploit
- http://scary.beasts.org/security/CESA-2009-001.html Exploit
- http://scarybeastsecurity.blogspot.com/2009/01/bypassing-syscall-filtering.html scarybeastsecurity.blogspot.com
- http://www.citi.umich.edu/u/provos/systrace/ www.citi.umich.edu
- http://www.securityfocus.com/archive/1/500377/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/33417 Exploit