FKIE_CVE-2007-4302

Vulnerability from fkie_nvd - Published: 2007-08-13 21:17 - Updated: 2025-04-09 00:30
Severity ?
Summary
Multiple race conditions in certain system call wrappers in Generic Software Wrappers Toolkit (GSWTK) allow local users to defeat system call interposition and possibly gain privileges or bypass auditing.
References
cve@mitre.orghttp://secunia.com/advisories/26469
cve@mitre.orghttp://www.securityfocus.com/bid/25251Exploit
cve@mitre.orghttp://www.watson.org/~robert/2007woot/
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/26469
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/25251Exploit
af854a3a-2127-422b-91ae-364da2661108http://www.watson.org/~robert/2007woot/
Impacted products
Vendor Product Version
freshmeat generic_software_wrappers_toolkit 1.6.3
To clipboard Create KEV Entry 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:freshmeat:generic_software_wrappers_toolkit:1.6.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "05D095EA-F090-499A-9E02-86BB7C82156D",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple race conditions in certain system call wrappers in Generic Software Wrappers Toolkit (GSWTK) allow local users to defeat system call interposition and possibly gain privileges or bypass auditing."
    },
    {
      "lang": "es",
      "value": "M\u00faltiples vulnerabilidades de condici\u00f3n de carrera en ciertos envoltorios de llamadas al sistema en Generic Software Wrappers Toolkit (GSWTK) permite a usuarios locales vencer la interposici\u00f3n de llamadas al sistema y posiblemente obtener privilegios o evitar auditor\u00edas."
    }
  ],
  "id": "CVE-2007-4302",
  "lastModified": "2025-04-09T00:30:58.490",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "HIGH",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 6.2,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:L/AC:H/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 1.9,
        "impactScore": 10.0,
        "obtainAllPrivilege": true,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2007-08-13T21:17:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/26469"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.securityfocus.com/bid/25251"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.watson.org/~robert/2007woot/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/26469"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.securityfocus.com/bid/25251"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.watson.org/~robert/2007woot/"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.