NVD

Id
56693  
Name
CVE-2007-4573  
Description
The IA32 system call emulation functionality in Linux kernel 2.4.x and 2.6.x before 2.6.22.7, when running on the x86_64 architecture, does not zero extend the eax register after the 32bit entry path to ptrace is used, which might allow local users to gain privileges by triggering an out-of-bounds access to the system call table using the %RAX register.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-09-24  
Modified Date
2011-03-07  
Seq
2007-4573  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
288992 56693 CVE-2007-4573 FEDORA-2007-2298  View
288993 56693 CVE-2007-4573 http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.35.3  View
288994 56693 CVE-2007-4573 SUSE-SA:2007:064  View
288995 56693 CVE-2007-4573 [linux-kernel] 20070921 Linux 2.6.22.7  View
288996 56693 CVE-2007-4573 [linux-kernel] 20070921 Re: Linux 2.6.22.7  View
288997 56693 CVE-2007-4573 20070924 COSEINC Linux Advisory #2: IA32 System Call  View
288998 56693 CVE-2007-4573 oval:org.mitre.oval:def:9735  View
288999 56693 CVE-2007-4573 1018748  View
289000 56693 CVE-2007-4573 DSA-1378  View
289001 56693 CVE-2007-4573 DSA-1381  View
289002 56693 CVE-2007-4573 DSA-1504  View
289003 56693 CVE-2007-4573 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.7  View
289004 56693 CVE-2007-4573 MDKSA-2007:195  View
289005 56693 CVE-2007-4573 MDKSA-2007:196  View
289006 56693 CVE-2007-4573 MDVSA-2008:008  View
289007 56693 CVE-2007-4573 MDVSA-2008:105  View
289008 56693 CVE-2007-4573 SUSE-SA:2007:053  View
289009 56693 CVE-2007-4573 RHSA-2007:0936  View
289010 56693 CVE-2007-4573 RHSA-2007:0937  View
289011 56693 CVE-2007-4573 RHSA-2007:0938  View
289012 56693 CVE-2007-4573 20070924 COSEINC Linux Advisory #2: IA32 System Call Emulation Vulnerability  View
289013 56693 CVE-2007-4573 20070926 Re: COSEINC Linux Advisory #2: IA32 System CallEmulation Vulnerability  View
289014 56693 CVE-2007-4573 25774  View
289015 56693 CVE-2007-4573 USN-518-1  View
289016 56693 CVE-2007-4573 ADV-2007-3246  View
289017 56693 CVE-2007-4573 https://issues.rpath.com/browse/RPL-1754  View
289018 56693 CVE-2007-4573 FEDORA-2007-712  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52065 JVNDB-2007-000728 Linux kernel の IA32 システムコールエミュレーション機能における権限昇格の脆弱性 x86_64 アーキテクチャで動作している、Linux Kernel の IA32 システムコールエミュレーション機能には、RAX レジスタの上位部分のチェックに不備があり、権限昇格の脆弱性が存在します。 CVE-2007-4573 27928 CVE-2007-4573 56693 7.2 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000728.html 2007-09-24 2008-10-30 View