NVD

Id
52485  
Name
CVE-2007-0257  
Description
** DISPUTED ** Unspecified vulnerability in the expand_stack function in grsecurity PaX allows local users to gain privileges via unspecified vectors. NOTE: the grsecurity developer has disputed this issue, stating that "the function they claim the vulnerability to be in is a trivial function, which can, and has been, easily checked for any supposed vulnerabilities." The developer also cites a past disclosure that was not proven. As of 20070120, the original researcher has released demonstration code.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-01-16  
Modified Date
2011-03-07  
Seq
2007-0257  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
265244 52485 CVE-2007-0257 http://forums.grsecurity.net/viewtopic.php?t=1646  View
265245 52485 CVE-2007-0257 http://grsecurity.net/news.php#digitalfud  View
265246 52485 CVE-2007-0257 1017509  View
265247 52485 CVE-2007-0257 http://www.digitalarmaments.com/news_news.shtml  View
265248 52485 CVE-2007-0257 http://www.digitalarmaments.com/pre2007-00018659.html  View
265249 52485 CVE-2007-0257 20070111 Digital Armaments Security Pre-Advisory 11.01.2007: Grsecurity Kernel PaX - Local root vulnerability  View
265250 52485 CVE-2007-0257 20070112 Lies? [Was: Re: Digital Armaments Security Pre-Advisory11.01.2007: Grsecurity Kernel PaX - Local root vulnerability]  View
265251 52485 CVE-2007-0257 20070120 Digital Armaments Security Advisory 20.01.2007: Grsecurity Kernel PaX Vulnerability  View
265252 52485 CVE-2007-0257 20070309 Re: Digital Armaments Security Advisory 20.01.2007: Grsecurity Kernel PaX Vulnerability  View
265253 52485 CVE-2007-0257 22014  View
265254 52485 CVE-2007-0257 ADV-2007-0155  View

Related JVN