Read the docs
TI-2007-04165 Aliases CVE-2007-4305GHSA-3vw3-g8hp-j327

Multiple race conditions in the (1) Sudo monitor mode and (2) Sysjail policies in…

Priority LOW 29Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Multiple race conditions in the (1) Sudo monitor mode and (2) Sysjail policies in Systrace on NetBSD and OpenBSD allow local users to defeat system call interposition, and consequently bypass access control policy and auditing.

Why it matters now

EPSS 0.00858 58th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 47

CPEVersionsRoleVendor
cpe:2.3:o:netbsd:netbsd:*:*:*:*:*:*:*:*all versionsRunning onNetBSD
cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*all versionsRunning onOpenBSD
cpe:2.3:a:sysjail:sysjail:*:*:*:*:*:*:*:*all versionsVulnerableSysjail
cpe:2.3:a:systrace:systrace:*:*:*:*:*:*:*:*all versionsVulnerableSystrace
cpe:2.3:a:todd_miller:sudo:1.5.6:*:*:*:*:*:*:*1.5.6VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.5.7:*:*:*:*:*:*:*1.5.7VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.5.8:*:*:*:*:*:*:*1.5.8VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.5.9:*:*:*:*:*:*:*1.5.9VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6:*:*:*:*:*:*:*1.6VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.1:*:*:*:*:*:*:*1.6.1VulnerableTodd Miller
  • cpe:2.3:o:netbsd:netbsd:*:*:*:*:*:*:*:* Versions all versions Running on ·NetBSD
  • cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:* Versions all versions Running on ·OpenBSD
  • cpe:2.3:a:sysjail:sysjail:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Sysjail
  • cpe:2.3:a:systrace:systrace:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Systrace
  • cpe:2.3:a:todd_miller:sudo:1.5.6:*:*:*:*:*:*:* Versions 1.5.6 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.5.7:*:*:*:*:*:*:* Versions 1.5.7 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.5.8:*:*:*:*:*:*:* Versions 1.5.8 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.5.9:*:*:*:*:*:*:* Versions 1.5.9 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6:*:*:*:*:*:*:* Versions 1.6 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.1:*:*:*:*:*:*:* Versions 1.6.1 Vulnerable ·Todd Miller
Show 37 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:todd_miller:sudo:1.6.2:*:*:*:*:*:*:*1.6.2VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.3:*:*:*:*:*:*:*1.6.3VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.3_p1:*:*:*:*:*:*:*1.6.3_p1VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.3_p2:*:*:*:*:*:*:*1.6.3_p2VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.3_p3:*:*:*:*:*:*:*1.6.3_p3VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.3_p4:*:*:*:*:*:*:*1.6.3_p4VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.3_p5:*:*:*:*:*:*:*1.6.3_p5VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.3_p6:*:*:*:*:*:*:*1.6.3_p6VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.3_p7:*:*:*:*:*:*:*1.6.3_p7VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.3p1:*:*:*:*:*:*:*1.6.3p1VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.3p2:*:*:*:*:*:*:*1.6.3p2VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.3p3:*:*:*:*:*:*:*1.6.3p3VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.3p4:*:*:*:*:*:*:*1.6.3p4VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.3p5:*:*:*:*:*:*:*1.6.3p5VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.3p6:*:*:*:*:*:*:*1.6.3p6VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.3p7:*:*:*:*:*:*:*1.6.3p7VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.4:*:*:*:*:*:*:*1.6.4VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.4_p1:*:*:*:*:*:*:*1.6.4_p1VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.4_p2:*:*:*:*:*:*:*1.6.4_p2VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.4p1:*:*:*:*:*:*:*1.6.4p1VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.4p2:*:*:*:*:*:*:*1.6.4p2VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.5:*:*:*:*:*:*:*1.6.5VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.5_p1:*:*:*:*:*:*:*1.6.5_p1VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.5_p2:*:*:*:*:*:*:*1.6.5_p2VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.5p1:*:*:*:*:*:*:*1.6.5p1VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.5p2:*:*:*:*:*:*:*1.6.5p2VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.6:*:*:*:*:*:*:*1.6.6VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.7:*:*:*:*:*:*:*1.6.7VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.7_p5:*:*:*:*:*:*:*1.6.7_p5VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.8:*:*:*:*:*:*:*1.6.8VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.8_p1:*:*:*:*:*:*:*1.6.8_p1VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.8_p2:*:*:*:*:*:*:*1.6.8_p2VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.8_p5:*:*:*:*:*:*:*1.6.8_p5VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.8_p7:*:*:*:*:*:*:*1.6.8_p7VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.8_p8:*:*:*:*:*:*:*1.6.8_p8VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.8_p9:*:*:*:*:*:*:*1.6.8_p9VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.8_p12:*:*:*:*:*:*:*1.6.8_p12VulnerableTodd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.2:*:*:*:*:*:*:* Versions 1.6.2 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.3:*:*:*:*:*:*:* Versions 1.6.3 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.3_p1:*:*:*:*:*:*:* Versions 1.6.3_p1 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.3_p2:*:*:*:*:*:*:* Versions 1.6.3_p2 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.3_p3:*:*:*:*:*:*:* Versions 1.6.3_p3 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.3_p4:*:*:*:*:*:*:* Versions 1.6.3_p4 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.3_p5:*:*:*:*:*:*:* Versions 1.6.3_p5 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.3_p6:*:*:*:*:*:*:* Versions 1.6.3_p6 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.3_p7:*:*:*:*:*:*:* Versions 1.6.3_p7 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.3p1:*:*:*:*:*:*:* Versions 1.6.3p1 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.3p2:*:*:*:*:*:*:* Versions 1.6.3p2 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.3p3:*:*:*:*:*:*:* Versions 1.6.3p3 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.3p4:*:*:*:*:*:*:* Versions 1.6.3p4 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.3p5:*:*:*:*:*:*:* Versions 1.6.3p5 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.3p6:*:*:*:*:*:*:* Versions 1.6.3p6 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.3p7:*:*:*:*:*:*:* Versions 1.6.3p7 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.4:*:*:*:*:*:*:* Versions 1.6.4 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.4_p1:*:*:*:*:*:*:* Versions 1.6.4_p1 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.4_p2:*:*:*:*:*:*:* Versions 1.6.4_p2 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.4p1:*:*:*:*:*:*:* Versions 1.6.4p1 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.4p2:*:*:*:*:*:*:* Versions 1.6.4p2 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.5:*:*:*:*:*:*:* Versions 1.6.5 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.5_p1:*:*:*:*:*:*:* Versions 1.6.5_p1 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.5_p2:*:*:*:*:*:*:* Versions 1.6.5_p2 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.5p1:*:*:*:*:*:*:* Versions 1.6.5p1 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.5p2:*:*:*:*:*:*:* Versions 1.6.5p2 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.6:*:*:*:*:*:*:* Versions 1.6.6 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.7:*:*:*:*:*:*:* Versions 1.6.7 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.7_p5:*:*:*:*:*:*:* Versions 1.6.7_p5 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.8:*:*:*:*:*:*:* Versions 1.6.8 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.8_p1:*:*:*:*:*:*:* Versions 1.6.8_p1 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.8_p2:*:*:*:*:*:*:* Versions 1.6.8_p2 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.8_p5:*:*:*:*:*:*:* Versions 1.6.8_p5 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.8_p7:*:*:*:*:*:*:* Versions 1.6.8_p7 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.8_p8:*:*:*:*:*:*:* Versions 1.6.8_p8 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.8_p9:*:*:*:*:*:*:* Versions 1.6.8_p9 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.8_p12:*:*:*:*:*:*:* Versions 1.6.8_p12 Vulnerable ·Todd Miller

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2007-4305
  2. 2026-10-03 Alias added: GHSA-3vw3-g8hp-j327

References

Other 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences