Lucene search

K
cve[email protected]CVE-2009-0342
HistoryJan 29, 2009 - 7:30 p.m.

CVE-2009-0342

2009-01-2919:30:00
CWE-264
web.nvd.nist.gov
30
systrace
cve-2009-0342
access restrictions
x86_64 linux
nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

Niels Provos Systrace before 1.6f on the x86_64 Linux platform allows local users to bypass intended access restrictions by making a 64-bit syscall with a syscall number that corresponds to a policy-compliant 32-bit syscall.

Affected configurations

NVD
Node
provossystraceRange1.6e
OR
provossystraceMatch1.1
OR
provossystraceMatch1.2
OR
provossystraceMatch1.3
OR
provossystraceMatch1.4
OR
provossystraceMatch1.5
OR
provossystraceMatch1.6
OR
provossystraceMatch1.6a
OR
provossystraceMatch1.6b
OR
provossystraceMatch1.6c
OR
provossystraceMatch1.6d
AND
linuxlinux_kernelMatch_nil__nil_x86_64

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%