CVEvulnerability
CVE-2009-0343
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-01-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
Niels Provos Systrace 1.6f and earlier on the x86_64 Linux platform allows local users to bypass intended access restrictions by making a 32-bit syscall with a syscall number that corresponds to a policy-compliant 64-bit syscall, related to race conditions that occur in monitoring 64-bit processes.
Affected configurations
• niels provos systrace (<= 1.6e)
• niels provos systrace 1.1
• niels provos systrace 1.2
• niels provos systrace 1.3
• niels provos systrace 1.4
• niels provos systrace 1.5
• niels provos systrace 1.6
• niels provos systrace 1.6a
• niels provos systrace 1.6b
• niels provos systrace 1.6c
• niels provos systrace 1.6d
Related
Weakness · not in database (1)
References
- http://scary.beasts.org/security/CESA-2009-001.html Exploit
- http://scarybeastsecurity.blogspot.com/2009/01/bypassing-syscall-filtering.html scarybeastsecurity.blogspot.com
- http://www.citi.umich.edu/u/provos/systrace/ www.citi.umich.edu
- http://www.securityfocus.com/archive/1/500377/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/33417 Exploit
- http://scary.beasts.org/security/CESA-2009-001.html Exploit
- http://scarybeastsecurity.blogspot.com/2009/01/bypassing-syscall-filtering.html scarybeastsecurity.blogspot.com
- http://www.citi.umich.edu/u/provos/systrace/ www.citi.umich.edu
- http://www.securityfocus.com/archive/1/500377/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/33417 Exploit