Lucene search

K
cveMitreCVE-2007-4302
HistoryAug 13, 2007 - 9:17 p.m.

CVE-2007-4302

2007-08-1321:17:00
mitre
web.nvd.nist.gov
25
cve-2007-4302
race conditions
system call wrappers
gswtk
privilege escalation
auditing bypass

CVSS2

6.2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

Low

EPSS

0

Percentile

0.4%

Multiple race conditions in certain system call wrappers in Generic Software Wrappers Toolkit (GSWTK) allow local users to defeat system call interposition and possibly gain privileges or bypass auditing.

Affected configurations

Nvd
Node
freshmeatgeneric_software_wrappers_toolkitMatch1.6.3
VendorProductVersionCPE
freshmeatgeneric_software_wrappers_toolkit1.6.3cpe:2.3:a:freshmeat:generic_software_wrappers_toolkit:1.6.3:*:*:*:*:*:*:*

CVSS2

6.2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

Low

EPSS

0

Percentile

0.4%

Related for CVE-2007-4302