CVE-2009-0343
Published Jan 29, 2009
Last updated 6 years ago
Overview
- Description
- Niels Provos Systrace 1.6f and earlier on the x86_64 Linux platform allows local users to bypass intended access restrictions by making a 32-bit syscall with a syscall number that corresponds to a policy-compliant 64-bit syscall, related to race conditions that occur in monitoring 64-bit processes.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.2
- Impact score
- 10
- Exploitability score
- 3.9
- Vector string
- AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- CWE-264
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:niels_provos:systrace:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8C778AF1-B380-4456-8C6B-BDBFD7C31860",
"versionEndIncluding": "1.6e"
},
{
"criteria": "cpe:2.3:a:niels_provos:systrace:1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "38A786ED-B9C9-41EE-99E6-30BFA0DD984A"
},
{
"criteria": "cpe:2.3:a:niels_provos:systrace:1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "56D872DA-238E-4DA5-8187-4FEE1A63AC08"
},
{
"criteria": "cpe:2.3:a:niels_provos:systrace:1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "66D4199A-72A3-4EBE-919D-4366520E7848"
},
{
"criteria": "cpe:2.3:a:niels_provos:systrace:1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DCE73152-5620-44A2-B09B-66CDBBAD1F41"
},
{
"criteria": "cpe:2.3:a:niels_provos:systrace:1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B210A03B-A13E-4F48-B5DA-D8D4EA3A2C69"
},
{
"criteria": "cpe:2.3:a:niels_provos:systrace:1.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DDF7BA51-FD3D-4FFF-B5AC-DB2CE6EDF5A1"
},
{
"criteria": "cpe:2.3:a:niels_provos:systrace:1.6a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F5300D33-C8AF-4389-8309-B375C36FC794"
},
{
"criteria": "cpe:2.3:a:niels_provos:systrace:1.6b:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F316742F-6281-4749-AAA3-338B64042714"
},
{
"criteria": "cpe:2.3:a:niels_provos:systrace:1.6c:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6DBB4B24-0570-47F4-ABF6-73C83BCD710F"
},
{
"criteria": "cpe:2.3:a:niels_provos:systrace:1.6d:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A484409A-8DD4-4CDE-A179-CAFDCB20AF3E"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:linux:linux_kernel:_nil_:_nil_:x86_64:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "FA8AA941-3B59-458D-8C3F-EBB79B754F8C"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]