Lucene search

K
cve[email protected]CVE-2007-4303
HistoryAug 13, 2007 - 9:17 p.m.

CVE-2007-4303

2007-08-1321:17:00
web.nvd.nist.gov
23
cve-2007-4303
cerbng
race conditions
freebsd 4.8
system call interposition
privilege escalation
bypass auditing

6.2 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

Multiple race conditions in (1) certain rules and (2) argument copying during VM protection, in CerbNG for FreeBSD 4.8 allow local users to defeat system call interposition and possibly gain privileges or bypass auditing, as demonstrated by modifying command lines in log-exec.cb.

Affected configurations

NVD
Node
freebsdfreebsdMatch4.8
AND
cerbcerbngMatch0.1freebsd
OR
cerbcerbngMatch0.2freebsd
OR
cerbcerbngMatch0.3freebsd
OR
cerbcerbngMatch0.4freebsd

6.2 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

Related for CVE-2007-4303