CVE-2007-0257

{"id": "CVE-2007-0257", "cveTags": [{"tags": ["disputed"], "sourceIdentifier": "cve@mitre.org"}], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2007-01-16T23:28:00.000", "references": [{"url": "http://forums.grsecurity.net/viewtopic.php?t=1646", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://grsecurity.net/news.php#digitalfud", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/32727", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/23713", "source": "cve@mitre.org"}, {"url": "http://securitytracker.com/id?1017509", "source": "cve@mitre.org"}, {"url": "http://www.digitalarmaments.com/news_news.shtml", "tags": ["Vendor Advisory", "URL Repurposed"], "source": "cve@mitre.org"}, {"url": "http://www.digitalarmaments.com/pre2007-00018659.html", "tags": ["Vendor Advisory", "URL Repurposed"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/456626/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/456722/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/457509/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/462302/100/100/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/22014", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2007/0155", "source": "cve@mitre.org"}, {"url": "http://forums.grsecurity.net/viewtopic.php?t=1646", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://grsecurity.net/news.php#digitalfud", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://osvdb.org/32727", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/23713", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://securitytracker.com/id?1017509", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.digitalarmaments.com/news_news.shtml", "tags": ["Vendor Advisory", "URL Repurposed"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.digitalarmaments.com/pre2007-00018659.html", "tags": ["Vendor Advisory", "URL Repurposed"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/archive/1/456626/100/0/threaded", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/archive/1/456722/100/0/threaded", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/archive/1/457509/100/0/threaded", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/archive/1/462302/100/100/threaded", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/22014", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2007/0155", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the expand_stack function in grsecurity PaX allows local users to gain privileges via unspecified vectors. NOTE: the grsecurity developer has disputed this issue, stating that \"the function they claim the vulnerability to be in is a trivial function, which can, and has been, easily checked for any supposed vulnerabilities.\" The developer also cites a past disclosure that was not proven. As of 20070120, the original researcher has released demonstration code"}, {"lang": "es", "value": "** DISPUTADA ** Vulnerabilidad no especificada en la funci\u00f3n expand_stack en grsecurity PaX permite a usuarios locales obtener privilegios a trav\u00e9s de vectores no especificados. NOTA: el desarrollador grsecurity ha disputado este problema, diciendo que 'la funci\u00f3n donde dicen que est\u00e1 la vulnerabilidad es una funci\u00f3n insignificante, que puede ser, y ha sido, f\u00e1cilmente comprobada por cualquier supuesta vulnerabilidad.' El desarrollador tambi\u00e9n cita una divulgaci\u00f3n anterior que no se prob\u00f3. Desde el 20 de enero del 2007, el investigador original ha emitido c\u00f3digo de demostraci\u00f3n."}], "lastModified": "2025-04-09T00:30:58.490", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:grsecurity:grsecurity_kernel_patch:1.9.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1E8B4803-8997-458A-A62C-F8E1BDC0A57E"}, {"criteria": "cpe:2.3:a:grsecurity:grsecurity_kernel_patch:2.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "09DF5719-7980-42F1-A55F-BA42B5AB51E8"}, {"criteria": "cpe:2.3:a:grsecurity:grsecurity_kernel_patch:2.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E661647F-ED24-40C9-B85D-9C60F45EA00F"}, {"criteria": "cpe:2.3:a:grsecurity:grsecurity_kernel_patch:2.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B4D9BF20-272D-428A-88DD-0CA90B14C631"}, {"criteria": "cpe:2.3:a:grsecurity:grsecurity_kernel_patch:2.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "95BF408B-DE5C-4AD4-986B-FF9C38E1B515"}, {"criteria": "cpe:2.3:a:grsecurity:grsecurity_kernel_patch:2.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "23E79624-4CBD-4744-BD1E-518B9EBFF7C1"}, {"criteria": "cpe:2.3:a:grsecurity:grsecurity_kernel_patch:2.1.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "61DC3A73-B269-4418-A8EC-877BDDDB57BF"}, {"criteria": "cpe:2.3:a:grsecurity:grsecurity_kernel_patch:2.1.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5F45B7B0-DAEE-4101-97AB-C41F6E206916"}, {"criteria": "cpe:2.3:a:grsecurity:grsecurity_kernel_patch:2.1.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EAC33E4A-76D3-4C16-B261-CDB0CF78F048"}, {"criteria": "cpe:2.3:a:grsecurity:grsecurity_kernel_patch:2.1.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AB4F7AFD-AD7A-45ED-9660-7BC6DFCD36E9"}, {"criteria": "cpe:2.3:a:grsecurity:grsecurity_kernel_patch:2.1.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B598D0A0-21A2-4731-B816-A96B4D8A389A"}, {"criteria": "cpe:2.3:a:grsecurity:grsecurity_kernel_patch:2.1.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "30A7EF3A-9C9D-49EC-B214-80D43558CFDD"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}