CVE-2007-0004

The NFS client implementation in the kernel in Red Hat Enterprise Linux RHEL 3, when a filesystem is mounted with the noacl option, checks permissions for the open system call via vfspermission mode bits data rather than an NFS ACCESS call to the server, which allows local client processes to...

Race condition

Race condition in the tee systee system call in the Linux kernel 2.6.17 through 2.6.17.6 might allow local users to cause a denial of service system crash, obtain sensitive information kernel memory contents, or gain privileges via unspecified vectors related to a potentially dropped ipipe lock...

Race condition

Multiple race conditions in 1 certain rules and 2 argument copying during VM protection, in CerbNG for FreeBSD 4.8 allow local users to defeat system call interposition and possibly gain privileges or bypass auditing, as demonstrated by modifying command lines in log-exec.cb...

CVE-2007-4304

CerbNG for FreeBSD 4.8 does not properly implement VM protection when attempting to prevent system call wrapper races, which allows local users to have an unknown impact related to an "incorrect write protection of pages"...

CVE-2007-4303

Multiple race conditions in 1 certain rules and 2 argument copying during VM protection, in CerbNG for FreeBSD 4.8 allow local users to defeat system call interposition and possibly gain privileges or bypass auditing, as demonstrated by modifying command lines in log-exec.cb...

CVE-2007-4302

Multiple race conditions in certain system call wrappers in Generic Software Wrappers Toolkit GSWTK allow local users to defeat system call interposition and possibly gain privileges or bypass auditing...

Race condition

Multiple race conditions in certain system call wrappers in Generic Software Wrappers Toolkit GSWTK allow local users to defeat system call interposition and possibly gain privileges or bypass auditing...

Design/Logic Flaw

CerbNG for FreeBSD 4.8 does not properly implement VM protection when attempting to prevent system call wrapper races, which allows local users to have an unknown impact related to an "incorrect write protection of pages"...

CVE-2007-4304

CVE-2007-4304 affects CerbNG for FreeBSD 4.8. The issue is a failure to properly enforce VM protection while preventing system-call wrapper races, enabling local users to potentially cause an incorrect write protection of pages (impact classified as complete for confidentiality, integrity, and av...

CVE-2007-4303

CVE-2007-4303 concerns multiple race conditions in CerbNG for FreeBSD 4.8, specifically in (1) certain rules and (2) argument copying during VM protection. The issue permits local users to defeat system call interposition and potentially gain privileges or bypass auditing, demonstrated by alterin...

CVE-2007-4302

CVE-2007-4302 concerns the Generic Software Wrappers Toolkit (GSWTK), where multiple race conditions in certain system call wrappers allow a local attacker to defeat system call interposition and potentially gain privileges or bypass auditing. The affected component is the GSWTK system call wrapp...

CVE-2007-4302

Multiple race conditions in certain system call wrappers in Generic Software Wrappers Toolkit GSWTK allow local users to defeat system call interposition and possibly gain privileges or bypass auditing...

CVE-2007-4304

CerbNG for FreeBSD 4.8 does not properly implement VM protection when attempting to prevent system call wrapper races, which allows local users to have an unknown impact related to an "incorrect write protection of pages"...

Systrace - Multiple System Call Wrappers Concurrency Vulnerabilities

source: https://www.securityfocus.com/bid/25258/info Systrace is prone to multiple concurrency vulnerabilities due to its implementation of system call wrappers. This problem can result in a race condition between a user thread and the kernel. Attackers can exploit these issues by replacing certa...

Generic Software Wrappers Toolkit 1.6.3 (GSWTK) - Race Condition Privilege Escalation

/ source: https://www.securityfocus.com/bid/25251/info GSWKT Generic Software Wrappers Toolkit is prone to multiple concurrency vulnerabilities because of its implementation of system call wrappers. This problem can result in a race condition between a user thread and the kernel. Attackers can...

Systrace - Multiple System Call Wrappers Concurrency Vulnerabilities

Systrace - Multiple System Call Wrappers Concurrency Vulnerabilities source: https://www.securityfocus.com/bid/25258/info Systrace is prone to multiple concurrency vulnerabilities due to its implementation of system call wrappers. This problem can result in a race condition between a user thread...

Generic Software Wrappers Toolkit 1.6.3 (GSWTK) - Race Condition Privilege Escalation

Generic Software Wrappers Toolkit 1.6.3 GSWTK - Race Condition Privilege Escalation / source: https://www.securityfocus.com/bid/25251/info GSWKT Generic Software Wrappers Toolkit is prone to multiple concurrency vulnerabilities because of its implementation of system call wrappers. This problem c...

Linux kernel ptrace privilege elevation vulnerability

Added: 06/27/2007 CVE: CVE-2003-0127 BID: 7112 OSVDB: 4565 Background ptrace is a Linux system call which enables a parent process to observe and control another process. Problem Due to a failure by the kernel to restrict trace permissions, a local attacker could gain root privileges by attaching...

CVE-2007-2529

CVE-2007-2529 affects Solaris 10 (before 20070507) with an integer signedness error in the acl (facl) system call. The underlying issue is a signedness bug in ACE_SETACL handling, enabling local users to trigger a denial of service (kernel panic) and potentially escalate privileges. Publicly docu...

CVE-2007-2529

Integer signedness error in the acl facl system call in Solaris 10 before 20070507 allows local users to cause a denial of service kernel panic and possibly gain privileges via a certain argument, related to ACESETACL...