« Volver al listado

CVE-2007-0253

Estado: ModificadaAlta (7.2)—

Unspecified vulnerability in the grsecurity patch has unspecified impact and remote attack vectors, a different vulnerability than the expand_stack vulnerability from the Digital Armaments 20070110 pre-advisory. NOTE: the grsecurity developer has disputed this issue, stating that "the function they claim the vulnerability to be in is a trivial function, which can, and has been, easily checked for any supposed vulnerabilities." The developer also cites a past disclosure that was not proven

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Grsecurity — Grsecurity Kernel Patch

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-0253",
  "cveTags": [
    {
      "tags": [
        "disputed"
      ],
      "sourceIdentifier": "cve@mitre.org"
    }
  ],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.2,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": true,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-01-16T23:28:00.000",
  "references": [
    {
      "url": "http://forums.grsecurity.net/viewtopic.php?t=1646",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://grsecurity.net/news.php#digitalfud",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.digitalarmaments.com/news_news.shtml",
      "tags": [
        "Vendor Advisory",
        "URL Repurposed"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://forums.grsecurity.net/viewtopic.php?t=1646",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://grsecurity.net/news.php#digitalfud",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.digitalarmaments.com/news_news.shtml",
      "tags": [
        "Vendor Advisory",
        "URL Repurposed"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in the grsecurity patch has unspecified impact and remote attack vectors, a different vulnerability than the expand_stack vulnerability from the Digital Armaments 20070110 pre-advisory.  NOTE: the grsecurity developer has disputed this issue, stating that \"the function they claim the vulnerability to be in is a trivial function, which can, and has been, easily checked for any supposed vulnerabilities.\"  The developer also cites a past disclosure that was not proven"
    },
    {
      "lang": "es",
      "value": "** EN DISPUTA ** La vulnerabilidad no especificada en el parche grsecurity tiene un impacto no especificado y vectores de ataque remoto, una vulnerabilidad diferente a la vulnerabilidad expand_stack del pre-asesor Digital Armaments 20070110. NOTA: el desarrollador de grsecurity ha impugnado este problema, afirmando que \"la función en la que afirman que está la vulnerabilidad es una función trivial, que puede, y ha sido, fácilmente comprobada por cualquier supuesta vulnerabilidad\". El desarrollador también cita una divulgación anterior que no fue probada."
    }
  ],
  "lastModified": "2026-06-16T22:35:13.173",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:grsecurity:grsecurity_kernel_patch:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C6C337DA-7715-4BBB-A537-F240CF04F36C"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}