Unscored severity · published Aug 13, 2007
CVE-2007-4305
Multiple race conditions in the (1) Sudo monitor mode and (2) Sysjail policies in Systrace on NetBSD and OpenBSD allow local users to defeat system call interposition, and…
–
CVSS
0.9%
EPSS
No
On KEV
Description
Multiple race conditions in the (1) Sudo monitor mode and (2) Sysjail policies in Systrace on NetBSD and OpenBSD allow local users to defeat system call interposition, and consequently bypass access control policy and auditing.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 58% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SU
Sudo · Todd Miller
1.5.6; 1.5.7; 1.5.8; 1.5.9; 1.6; 1.6.1; +34 more · source: NVD
SY
Sysjail · Sysjail
All versions, or not specified · source: NVD
SY
Systrace · Systrace
All versions, or not specified · source: NVD