Design/Logic Flaw

CerbNG for FreeBSD 4.8 does not properly implement VM protection when attempting to prevent system call wrapper races, which allows local users to have an unknown impact related to an "incorrect write protection of pages"...

Race condition

Multiple race conditions in 1 certain rules and 2 argument copying during VM protection, in CerbNG for FreeBSD 4.8 allow local users to defeat system call interposition and possibly gain privileges or bypass auditing, as demonstrated by modifying command lines in log-exec.cb...

CVE-2007-4304

CVE-2007-4304 affects CerbNG for FreeBSD 4.8. The issue is a failure to properly enforce VM protection while preventing system-call wrapper races, enabling local users to potentially cause an incorrect write protection of pages (impact classified as complete for confidentiality, integrity, and av...

CVE-2007-4302

Multiple race conditions in certain system call wrappers in Generic Software Wrappers Toolkit GSWTK allow local users to defeat system call interposition and possibly gain privileges or bypass auditing...

CVE-2007-4304

CerbNG for FreeBSD 4.8 does not properly implement VM protection when attempting to prevent system call wrapper races, which allows local users to have an unknown impact related to an "incorrect write protection of pages"...

CVE-2007-4302

CVE-2007-4302 concerns the Generic Software Wrappers Toolkit (GSWTK), where multiple race conditions in certain system call wrappers allow a local attacker to defeat system call interposition and potentially gain privileges or bypass auditing. The affected component is the GSWTK system call wrapp...

CVE-2007-4303

CVE-2007-4303 concerns multiple race conditions in CerbNG for FreeBSD 4.8, specifically in (1) certain rules and (2) argument copying during VM protection. The issue permits local users to defeat system call interposition and potentially gain privileges or bypass auditing, demonstrated by alterin...

Generic Software Wrappers Toolkit 1.6.3 (GSWTK) - Race Condition Privilege Escalation

Generic Software Wrappers Toolkit 1.6.3 GSWTK - Race Condition Privilege Escalation / source: https://www.securityfocus.com/bid/25251/info GSWKT Generic Software Wrappers Toolkit is prone to multiple concurrency vulnerabilities because of its implementation of system call wrappers. This problem c...

Systrace - Multiple System Call Wrappers Concurrency Vulnerabilities

Systrace - Multiple System Call Wrappers Concurrency Vulnerabilities source: https://www.securityfocus.com/bid/25258/info Systrace is prone to multiple concurrency vulnerabilities due to its implementation of system call wrappers. This problem can result in a race condition between a user thread...

Systrace - Multiple System Call Wrappers Concurrency Vulnerabilities

source: https://www.securityfocus.com/bid/25258/info Systrace is prone to multiple concurrency vulnerabilities due to its implementation of system call wrappers. This problem can result in a race condition between a user thread and the kernel. Attackers can exploit these issues by replacing certa...

Generic Software Wrappers Toolkit 1.6.3 (GSWTK) - Race Condition Privilege Escalation

/ source: https://www.securityfocus.com/bid/25251/info GSWKT Generic Software Wrappers Toolkit is prone to multiple concurrency vulnerabilities because of its implementation of system call wrappers. This problem can result in a race condition between a user thread and the kernel. Attackers can...

Linux kernel ptrace privilege elevation vulnerability

Added: 06/27/2007 CVE: CVE-2003-0127 BID: 7112 OSVDB: 4565 Background ptrace is a Linux system call which enables a parent process to observe and control another process. Problem Due to a failure by the kernel to restrict trace permissions, a local attacker could gain root privileges by attaching...

CVE-2007-2529

Integer signedness error in the acl facl system call in Solaris 10 before 20070507 allows local users to cause a denial of service kernel panic and possibly gain privileges via a certain argument, related to ACESETACL...

CVE-2007-2529

CVE-2007-2529 affects Solaris 10 (before 20070507) with an integer signedness error in the acl (facl) system call. The underlying issue is a signedness bug in ACE_SETACL handling, enabling local users to trigger a denial of service (kernel panic) and potentially escalate privileges. Publicly docu...

Mac OS X kernel "fpathconf()" syscall fails to properly handle unknown file types

Overview A vulnerability in the Mac OS X kernel could allow an authenticated local attacker to cause a denial of service. Description The fpathconf system call provides a method for applications to determine the current value of a configurable system limit or option variable associated with a fil...

RHEL 4 : kernel (RHSA-2007:0014)

Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...

CVE-2006-5753

Unspecified vulnerability in the listxattr system call in Linux kernel, when a "bad inode" is present, allows local users to cause a denial of service data corruption and possibly gain privileges via unknown vectors...

CVE-2006-5753

Unspecified vulnerability in the listxattr system call in Linux kernel, when a "bad inode" is present, allows local users to cause a denial of service data corruption and possibly gain privileges via unknown vectors...

[RISE-2007001] Apple Mac OS X 10.4.x kernel shared_region_map_file_np() memory corruption vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 RISE-2007001 Apple Mac OS X 10.4.x kernel sharedregionmapfilenp memory corruption vulnerability Released: January 19, 2007 Last updated: January 19, 2007 INTRODUCTION There exists a vulnerability within a function of the Apple Mac OS X 10.4.x kernel...

FreeBSD-SA-06:25.kmem

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:25.kmem Security Advisory The FreeBSD Project Topic: Kernel memory disclosure in firewire4 Category: core Module: sysdev Announced: 2006-12-06 Credits: Rodrigo...