CVE-2007-4303

Severity: medium (CVSS 6.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-08-13 · updated 2026-06-16

Description

Multiple race conditions in (1) certain rules and (2) argument copying during VM protection, in CerbNG for FreeBSD 4.8 allow local users to defeat system call interposition and possibly gain privileges or bypass auditing, as demonstrated by modifying command lines in log-exec.cb.

Affected products

Cerbng: 0.1, 0.2, 0.3, 0.4

References

http://secunia.com/advisories/26474
http://www.securityfocus.com/bid/25259
http://www.watson.org/~robert/2007woot/
http://secunia.com/advisories/26474
http://www.securityfocus.com/bid/25259
http://www.watson.org/~robert/2007woot/

Get alerted when CVE-2007-4303 or the next vulnerability affects your stack