Systrace 1.x (Linux Kernel x64) - Aware Local Privilege Escalation

/ source: https://www.securityfocus.com/bid/33417/info Systrace is prone to a local privilege-escalation vulnerability. A local attacker may be able to exploit this issue to bypass access control restrictions and make unintended system calls, which may result in an elevation of privileges. Versio...

Systrace 1.x (Linux Kernel x64) - Aware Local Privilege Escalation

Systrace 1.x Linux Kernel x64 - Aware Local Privilege Escalation / source: https://www.securityfocus.com/bid/33417/info Systrace is prone to a local privilege-escalation vulnerability. A local attacker may be able to exploit this issue to bypass access control restrictions and make unintended...

CVE-2007-4305

CVE-2007-4305 involves multiple race conditions in the Sudo monitor mode and in Sysjail policies of Systrace on NetBSD and OpenBSD. The underlying issue allows local users to defeat system call interposition, thereby bypassing access control policy and auditing. Affected components: NetBSD/OpenBS...

CVE-2007-4305: Undefined Security Weakness

Multiple race conditions in the 1 Sudo monitor mode and 2 Sysjail policies in Systrace on NetBSD and OpenBSD allow local users to defeat system call interposition, and consequently bypass access control policy and auditing...

Systrace - Multiple System Call Wrappers Concurrency Vulnerabilities

Systrace - Multiple System Call Wrappers Concurrency Vulnerabilities source: https://www.securityfocus.com/bid/25258/info Systrace is prone to multiple concurrency vulnerabilities due to its implementation of system call wrappers. This problem can result in a race condition between a user thread...

Systrace - Multiple System Call Wrappers Concurrency Vulnerabilities

source: https://www.securityfocus.com/bid/25258/info Systrace is prone to multiple concurrency vulnerabilities due to its implementation of system call wrappers. This problem can result in a race condition between a user thread and the kernel. Attackers can exploit these issues by replacing certa...

OpenBSD systrace systrace_preprepl本地整数溢出漏洞

OpenBSD是一款开放源代码Unix类操作系统，OpenBSD的systrace功能可以允许或拒绝被管理进程所执行的syscall。 systrace的内核组件中存在整数溢出漏洞，允许攻击者通过在systrace ioctl中指定很大的整数值触发这个漏洞，导致绕过安全检查、向任意内核地址越界写入空字节或读取内核内存块。 漏洞代码在systracepreprepl函数中： for i = 0, len = 0; i repl-strrnrepl; i++ len += repl-strroffleni; if repl-strroffleni == 0 continue; if...

CVE-2006-5218

Integer overflow in the systracepreprepl function STRIOCREPLACE in systrace in OpenBSD 3.9 and NetBSD 3 allows local users to cause a denial of service crash, gain privileges, or read arbitrary kernel memory via large numeric arguments to the systrace ioctl...

CVE-2006-5218

The CVE-2006-5218 entry describes an integer overflow in the systrace_preprepl function (STRIOCREPLACE) within the systrace component of OpenBSD 3.9 and NetBSD 3. This vulnerability can be triggered by large numeric arguments to the systrace ioctl, allowing local users to cause a denial of servic...

CVE-2006-5218: Undefined Security Weakness

Integer overflow in the systracepreprepl function STRIOCREPLACE in systrace in OpenBSD 3.9 and NetBSD 3 allows local users to cause a denial of service crash, gain privileges, or read arbitrary kernel memory via large numeric arguments to the systrace ioctl...

honeyd security advisory: remote detection

Honeyd Security Advisory 2006-001 ================================= Topic: Remote Detection Via Multiple Probe Packets Version: All versions prior to Honeyd 1.5 Severity: Identification of Honeyd installations allows an adversary to launch attacks specifically against Honeyd. No remote root explo...

CVE-2004-2012

The CVE-2004-2012 entry concerns the systrace_exit function in the systrace utility used on NetBSD-current (pre-April 16, 2004) and certain FreeBSD ports. The vulnerability arises because the code path does not verify the owner of the /dec/systrace connection before setting the effective user ID ...

CVE-2004-2012

The systraceexit function in the systrace utility for NetBSD-current and 2.0 before April 16, 2004, and certain FreeBSD ports, does not verify the owner of the /dec/systrace connection before setting euid to 0, which allows local users to gain root privileges...

CVE-2004-2012: Undefined Security Weakness

The systraceexit function in the systrace utility for NetBSD-current and 2.0 before April 16, 2004, and certain FreeBSD ports, does not verify the owner of the /dec/systrace connection before setting euid to 0, which allows local users to gain root privileges...

CVE-2004-2012

The systraceexit function in the systrace utility for NetBSD-current and 2.0 before April 16, 2004, and certain FreeBSD ports, does not verify the owner of the /dec/systrace connection before setting euid to 0, which allows local users to gain root privileges...

NetBSD systrace privilege escalation

By using invalid handling of error condition it's possible to obtain superuser privileges...

NetBSD Security Advisory 2004-007: Systrace systrace_exit() local root

-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2004-007 ================================= Topic: Systrace systraceexit local root Version: NetBSD-current: source prior to Apr 16, 2004 netBSD 2.0 branch: source prior to Apr 16, 2004 netBSD 1.6.2: not affected NetBSD 1.6.1: not affecte...

NetBSDFreeBSD Port Systrace 1.x - Exit Routine Access Validation Privilege Escalation

NetBSDFreeBSD Port Systrace 1.x - Exit Routine Access Validation Privilege Escalation // source: https://www.securityfocus.com/bid/10320/info A vulnerability has been reported that affects Systrace on NetBSD, as well as the FreeBSD port by Vladimir Kotal. The source of the issue is insufficient...

NetBSD/FreeBSD Port Systrace 1.x - Exit Routine Access Validation Privilege Escalation

// source: https://www.securityfocus.com/bid/10320/info A vulnerability has been reported that affects Systrace on NetBSD, as well as the FreeBSD port by Vladimir Kotal. The source of the issue is insufficient access validation when a systraced process is restoring privileges. This issue can be...

[Full-Disclosure] Advisory 04/2004: Net(Free)BSD Systrace local root vulnerabilitiy

e-matters GmbH www.e-matters.de -= Security Advisory =- Advisory: NetFreeBSD Systrace local root vulnerability Release Date: 2004/05/11 Last Modified: 2004/05/11 Author: Stefan Esser [email protected] Application: NetBSD with systrace support before 2004/04/09 FreeBSD with unofficial port by...