CVE-2007-4305 EXPLOIT
6.2
MEDIUM · CVSS 2.0 · EPSS 0.9% (pctl 57)
Patch early
A public exploit exists.
Description
Multiple race conditions in the (1) Sudo monitor mode and (2) Sysjail policies in Systrace on NetBSD and OpenBSD allow local users to defeat system call interposition, and consequently bypass access control policy and auditing.
Scoring
| CVSS | 6.2 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:L/AC:H/Au:N/C:C/I:C/A:C |
| EPSS | 0.86% — more likely to be exploited than 57% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2007-08-13 |
| Last modified | 2026-06-16 |
Affected (5)
| Vendor | Product |
|---|---|
| netbsd | netbsd |
| openbsd | openbsd |
| sysjail | sysjail |
| systrace | systrace |
| todd miller | sudo |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Systrace - Multiple System Call Wrappers Concurrency Vulnerabilities | 2007-08-09 |
References
→ the Explorer · watch your stack · NVD