CVE-2007-4303: Race Condition

Published Aug 13, 2007

Updated

Multiple race conditions in (1) certain rules and (2) argument copying during VM protection, in CerbNG for FreeBSD 4.8 allow local users to defeat system call interposition and possibly gain privileges or bypass auditing, as demonstrated by modifying command lines in log-exec.cb.

Affected Software

5 affected components

FreeBSD FreeBSD=4.8

Cerb CerbNG=0.1

Cerb CerbNG=0.2

Cerb CerbNG=0.3

Cerb CerbNG=0.4

Event History

Aug 13, 2007

CVE Published

09:17 PM

Data Sourced

09:17 PM

DescriptionWeaknessAffected Software

Aug 14, 2007

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-4303?

CVE-2007-4303 is considered a high severity vulnerability due to the potential for local users to gain elevated privileges.

How do I fix CVE-2007-4303?

To fix CVE-2007-4303, you should upgrade to a non-vulnerable version of CerbNG or apply any available patches.

Who is affected by CVE-2007-4303?

CVE-2007-4303 affects users running CerbNG versions 0.1 to 0.4 on FreeBSD 4.8.

What types of attacks can CVE-2007-4303 enable?

CVE-2007-4303 can enable local users to bypass system call interposition and audit logging.

Is there a known exploit for CVE-2007-4303?

Yes, CVE-2007-4303 has been demonstrated to be exploitable by manipulating command lines in log-exec.cb.