Lucene search
HistoryJan 29, 2009 - 7:30 p.m.
CVE-2009-0342
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
5.9
Confidence
Low
EPSS
0
Percentile
5.1%
Niels Provos Systrace before 1.6f on the x86_64 Linux platform allows local users to bypass intended access restrictions by making a 64-bit syscall with a syscall number that corresponds to a policy-compliant 32-bit syscall.
Affected configurations
Node
provossystraceRange≤1.6e
ORprovossystraceMatch1.1
ORprovossystraceMatch1.2
ORprovossystraceMatch1.3
ORprovossystraceMatch1.4
ORprovossystraceMatch1.5
ORprovossystraceMatch1.6
ORprovossystraceMatch1.6a
ORprovossystraceMatch1.6b
ORprovossystraceMatch1.6c
ORprovossystraceMatch1.6d
linuxlinux_kernelMatch_nil__nil_x86_64
| Vendor | Product | Version | CPE |
|---|---|---|---|
| provos | systrace | * | cpe:2.3:a:provos:systrace:*:*:*:*:*:*:*:* |
| provos | systrace | 1.1 | cpe:2.3:a:provos:systrace:1.1:*:*:*:*:*:*:* |
| provos | systrace | 1.2 | cpe:2.3:a:provos:systrace:1.2:*:*:*:*:*:*:* |
| provos | systrace | 1.3 | cpe:2.3:a:provos:systrace:1.3:*:*:*:*:*:*:* |
| provos | systrace | 1.4 | cpe:2.3:a:provos:systrace:1.4:*:*:*:*:*:*:* |
| provos | systrace | 1.5 | cpe:2.3:a:provos:systrace:1.5:*:*:*:*:*:*:* |
| provos | systrace | 1.6 | cpe:2.3:a:provos:systrace:1.6:*:*:*:*:*:*:* |
| provos | systrace | 1.6a | cpe:2.3:a:provos:systrace:1.6a:*:*:*:*:*:*:* |
| provos | systrace | 1.6b | cpe:2.3:a:provos:systrace:1.6b:*:*:*:*:*:*:* |
| provos | systrace | 1.6c | cpe:2.3:a:provos:systrace:1.6c:*:*:*:*:*:*:* |
Related
cve
cve
prion
prion
Design/Logic Flaw
2009-01-29 19:30:00
Design/Logic Flaw
2009-03-06 11:30:00
Design/Logic Flaw
2009-03-06 11:30:00
cvelist
cvelist
ubuntucve
ubuntucve
CVE-2009-0835
2009-03-06 00:00:00
CVE-2009-0834
2009-03-06 00:00:00
nvd
nvd
CVE-2009-0834
2009-03-06 11:30:02
CVE-2009-0835
2009-03-06 11:30:02
f5
f5
nessus
nessus
OracleVM 2.1 : kernel (OVMSA-2009-0009)
2014-11-26 00:00:00
Mandriva Linux Security Advisory : kernel (MDVSA-2009:118)
2009-05-20 00:00:00
openvas
openvas
Mandrake Security Advisory MDVSA-2009:118 (kernel)
2009-05-25 00:00:00
Mandrake Security Advisory MDVSA-2009:118 (kernel)
2009-05-25 00:00:00
Ubuntu USN-776-2 (kvm)
2009-06-05 00:00:00
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
5.9
Confidence
Low
EPSS
0
Percentile
5.1%
Related for NVD:CVE-2009-0342