CVE

Id
23614  
CVE No.
CVE-2007-0257  
Status
Candidate  
Description
** DISPUTED ** Unspecified vulnerability in the expand_stack function in grsecurity PaX allows local users to gain privileges via unspecified vectors. NOTE: the grsecurity developer has disputed this issue, stating that "the function they claim the vulnerability to be in is a trivial function, which can, and has been, easily checked for any supposed vulnerabilities." The developer also cites a past disclosure that was not proven. As of 20070120, the original researcher has released demonstration code.  
Phase
Assigned (20070116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
229169 23614 CVE-2007-0257 BUGTRAQ:20070111 Digital Armaments Security Pre-Advisory 11.01.2007: Grsecurity Kernel PaX - Local root vulnerability  View
229170 23614 CVE-2007-0257 URL:http://www.securityfocus.com/archive/1/archive/1/456626/100/0/threaded  View
229171 23614 CVE-2007-0257 BUGTRAQ:20070112 Lies? [Was: Re: Digital Armaments Security Pre-Advisory11.01.2007: Grsecurity Kernel PaX - Local root vulnerability]  View
229172 23614 CVE-2007-0257 URL:http://www.securityfocus.com/archive/1/archive/1/456722/100/0/threaded  View
229173 23614 CVE-2007-0257 BUGTRAQ:20070120 Digital Armaments Security Advisory 20.01.2007: Grsecurity Kernel PaX Vulnerability  View
229174 23614 CVE-2007-0257 URL:http://www.securityfocus.com/archive/1/archive/1/457509/100/0/threaded  View
229175 23614 CVE-2007-0257 BUGTRAQ:20070309 Re: Digital Armaments Security Advisory 20.01.2007: Grsecurity Kernel PaX Vulnerability  View
229176 23614 CVE-2007-0257 URL:http://www.securityfocus.com/archive/1/archive/1/462302/100/100/threaded  View
229177 23614 CVE-2007-0257 MISC:http://forums.grsecurity.net/viewtopic.php?t=1646  View
229178 23614 CVE-2007-0257 MISC:http://grsecurity.net/news.php#digitalfud  View
229179 23614 CVE-2007-0257 MISC:http://www.digitalarmaments.com/news_news.shtml  View
229180 23614 CVE-2007-0257 MISC:http://www.digitalarmaments.com/pre2007-00018659.html  View
229181 23614 CVE-2007-0257 BID:22014  View
229182 23614 CVE-2007-0257 URL:http://www.securityfocus.com/bid/22014  View
229183 23614 CVE-2007-0257 VUPEN:ADV-2007-0155  View
229184 23614 CVE-2007-0257 URL:http://www.vupen.com/english/advisories/2007/0155  View
229185 23614 CVE-2007-0257 OSVDB:32727  View
229186 23614 CVE-2007-0257 URL:http://osvdb.org/32727  View
229187 23614 CVE-2007-0257 SECTRACK:1017509  View
229188 23614 CVE-2007-0257 URL:http://securitytracker.com/id?1017509  View
229189 23614 CVE-2007-0257 SECUNIA:23713  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52693 JVNDB-2007-001385 Ezboxx Portal System における重要な情報を取得される脆弱性 Ezboxx Portal System は、エラーメッセージの中にパスを表示させるため、重要な情報を取得される脆弱性が存在します。 CVE-2007-0259 23614 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001385.html  View