CVE-2007-4305
Status: ModifiedMedium (6.2)—
Multiple race conditions in the (1) Sudo monitor mode and (2) Sysjail policies in Systrace on NetBSD and OpenBSD allow local users to defeat system call interposition, and consequently bypass access control policy and auditing.
CVSS
- Version: 2.0
- Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
- Base score: 6.2
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 0.86%
- Percentile among all scored CVEs: 57
- Score date: 10/3/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (3)
CWEs
- NVD-CWE-Other
References
Raw JSON (NVD)
Show
{
"id": "CVE-2007-4305",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 6.2,
"accessVector": "LOCAL",
"vectorString": "AV:L/AC:H/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "HIGH",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": true,
"exploitabilityScore": 1.9,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2007-08-13T21:17:00.000",
"references": [
{
"url": "http://secunia.com/advisories/26479",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/25258",
"tags": [
"Exploit"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.watson.org/~robert/2007woot/",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/26479",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/25258",
"tags": [
"Exploit"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.watson.org/~robert/2007woot/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Multiple race conditions in the (1) Sudo monitor mode and (2) Sysjail policies in Systrace on NetBSD and OpenBSD allow local users to defeat system call interposition, and consequently bypass access control policy and auditing."
},
{
"lang": "es",
"value": "Múltiples condiciones de carrera en (1) el modo monitor de Sudo Y (2) políticas Sysjail en Systrace de NetBSD y OpenBSD permiten a usuarios locales vencer la interposición en llamadas al sistema, y por tanto evitar la política de control de acceso y monitorización."
}
],
"lastModified": "2026-06-16T22:43:46.657",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netbsd:netbsd:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B55E4B92-88E0-41F0-AFA7-046A8D34A2CA"
},
{
"criteria": "cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "CA3CDD3C-DBA6-4BA2-967D-AD746822F3CF"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:sysjail:sysjail:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2CEAF47B-07F3-41C1-8AB1-E6F730B52235"
},
{
"criteria": "cpe:2.3:a:systrace:systrace:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "946E0FEF-F738-4EDE-9FD6-7F80428F3C29"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.5.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6060C8CB-1592-479E-86AD-AC180F855BD7"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.5.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A6DAA88C-BADD-405A-9E66-5B0839595A70"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.5.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "04D5E3B7-5377-4CA8-BA0D-056870CB717E"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.5.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "22C11931-B594-43EC-9698-7152B1DF8CA3"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "976B5923-1BCC-4DE6-A904-930DD833B937"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D5452DF1-0270-452D-90EB-45E9A084B94C"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.6.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CBFD12E6-F92E-4371-ADA7-BCD41E4C9014"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.6.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "67FDF4FB-06FA-4A10-A3CF-F52169BC8072"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.6.3_p1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A5B29018-B495-482A-8FF7-66821A178F9A"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.6.3_p2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "38718561-70C7-4E0D-9313-87A5E82ED338"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.6.3_p3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D057064A-9B34-4224-97BA-4D5840A92BE0"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.6.3_p4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E3C297DC-69B1-4BE6-A5EF-D320BD0CA968"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.6.3_p5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2F4C1FFB-F6AA-4DED-9C54-DCB274F59A44"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.6.3_p6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "338A92AC-92D2-40BF-9FAC-884AF6F74D55"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.6.3_p7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "26DB5610-03CE-425E-8855-70D5787029FE"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.6.3p1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F6848519-57E8-4636-BE10-A0AF06787B20"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.6.3p2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A458EA77-772C-4641-A08A-5733FA386974"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.6.3p3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "57B7415D-FE7F-4F67-8384-016BD6044015"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.6.3p4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "09429504-327B-44B3-A651-E933EADA0300"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.6.3p5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7889BA46-0FAA-4D62-B2BB-B895060F5585"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.6.3p6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "84FD9DD4-A6D0-40F4-9A8E-8E0017BE349C"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.6.3p7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B02CEAA5-8409-42AF-A4AE-58D9D16F007F"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.6.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C5DFC86C-7743-4F27-BC10-170F04C23D7B"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.6.4_p1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F5170421-BA0C-4365-9CD6-BD232EA08680"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.6.4_p2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5909AAA4-4AF9-4D23-87C5-5D7787909B02"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.6.4p1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2A3E4716-6D11-46DD-9378-3C733BBDCD8B"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.6.4p2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "55799ECB-CEB1-4839-8053-4C1F071D1526"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.6.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2170CFD0-2594-45FB-B68F-0A75114F00A8"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.6.5_p1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "03C07744-CAE8-44C6-965E-2A09BAE1F36C"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.6.5_p2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B17E0E59-C928-49AB-BAA7-4AE638B376D1"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.6.5p1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D6F99CB6-E185-4CE0-9E43-C5AE9017717B"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.6.5p2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D2F6F9C6-85B6-450F-9165-B23C2BF83EBE"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.6.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "294FC65B-4225-475A-B49A-758823CEDECD"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.6.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6156B085-AA17-458C-AED1-D658275E43B9"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.6.7_p5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1C898BE7-506D-49DA-8619-F86C7A9FE902"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.6.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B6419309-385F-4525-AD4B-C73B1A3ED935"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.6.8_p1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "51F7E821-2908-47F1-9665-E9D68ECC242F"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.6.8_p2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C90D0AB4-F8A8-4301-99B5-757254FA999A"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.6.8_p5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A79C7098-37D0-4E6E-A22C-3C771D81956F"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.6.8_p7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BB7D2832-B654-406E-AA34-B3BD1D6F0A2A"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.6.8_p8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D5688D95-89EF-4D2E-9728-2316CAC3CBE6"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.6.8_p9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B69E49B2-1B3C-4434-ACF1-CF4F519E3C32"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.6.8_p12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "31B2C299-5D0B-44DA-91FD-4B1146BE9A7B"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "cve@mitre.org"
}