CVE-2007-4302

Multiple race conditions in certain system call wrappers in Generic Software Wrappers Toolkit (GSWTK) allow local users to defeat system call interposition and possibly gain privileges or bypass auditing.

CVSS v2.0 6.2 MEDIUM

6.2^/10

CVSS v2.0 : MEDIUM

Vector : AV:L/AC:H/Au:N/C:C/I:C/A:C

Exploitability : 1.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity HIGH

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://secunia.com/advisories/26469
http://www.securityfocus.com/bid/25251	Exploit
http://www.watson.org/~robert/2007woot/
http://secunia.com/advisories/26469
http://www.securityfocus.com/bid/25251	Exploit
http://www.watson.org/~robert/2007woot/

Configurations

Configuration 1 (hide)

cpe:2.3:a:freshmeat:generic_software_wrappers_toolkit:1.6.3:*:*:*:*:*:*:*

History

21 Nov 2024, 00:35

Type	Values Removed	Values Added
References	~~() http://secunia.com/advisories/26469 -~~	() http://secunia.com/advisories/26469 -
References	~~() http://www.securityfocus.com/bid/25251 - Exploit~~	() http://www.securityfocus.com/bid/25251 - Exploit
References	~~() http://www.watson.org/~robert/2007woot/ -~~	() http://www.watson.org/~robert/2007woot/ -

Information

Published : 2007-08-13 21:17

Updated : 2025-04-09 00:30

NVD link : CVE-2007-4302

Mitre link : CVE-2007-4302

CVE.ORG link : CVE-2007-4302

JSON object : View

Products Affected

freshmeat

generic_software_wrappers_toolkit

CWE

NVD-CWE-Other

{"id": "CVE-2007-4302", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:H/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "HIGH", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "MEDIUM", "obtainAllPrivilege": true, "exploitabilityScore": 1.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2007-08-13T21:17:00.000", "references": [{"url": "http://secunia.com/advisories/26469", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/25251", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.watson.org/~robert/2007woot/", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/26469", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/25251", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.watson.org/~robert/2007woot/", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Multiple race conditions in certain system call wrappers in Generic Software Wrappers Toolkit (GSWTK) allow local users to defeat system call interposition and possibly gain privileges or bypass auditing."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de condici\u00f3n de carrera en ciertos envoltorios de llamadas al sistema en Generic Software Wrappers Toolkit (GSWTK) permite a usuarios locales vencer la interposici\u00f3n de llamadas al sistema y posiblemente obtener privilegios o evitar auditor\u00edas."}], "lastModified": "2025-04-09T00:30:58.490", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:freshmeat:generic_software_wrappers_toolkit:1.6.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "05D095EA-F090-499A-9E02-86BB7C82156D"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}