PT-2007-1729 · Grsecurity · Grsecurity Pax

Published 2007-01-16 · Updated 2025-01-17 · CVE-2007-0257

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions grsecurity PaX (affected versions not specified)

Description The issue concerns an unspecified vulnerability in the expand stack function, potentially allowing local users to gain privileges through unspecified vectors. However, the grsecurity developer has disputed this issue, stating that the function in question is trivial and has been checked for vulnerabilities. The developer also references a past disclosure that was not proven. As of 20070120, the original researcher released demonstration code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2007-0257

Affected Products

Grsecurity Pax

References · 15

• 🔥 https://exploit-db.com/exploits/29446 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-0257 · Security Note
• http://forums.grsecurity.net/viewtopic.php?t=1646 · Vendor Advisory
• http://digitalarmaments.com/pre2007-00018659.html · Vendor Advisory
• http://digitalarmaments.com/news_news.shtml · Vendor Advisory
• http://securityfocus.com/archive/1/456722/100/0/threaded · Note
• http://grsecurity.net/news.php#digitalfud · Note
• http://securityfocus.com/archive/1/462302/100/100/threaded · Note
• http://securityfocus.com/archive/1/456626/100/0/threaded · Note
• http://osvdb.org/32727 · Note
• http://securitytracker.com/id?1017509 · Note
• http://securityfocus.com/archive/1/457509/100/0/threaded · Note
• http://secunia.com/advisories/23713 · Note
• http://vupen.com/english/advisories/2007/0155 · Note
• http://securityfocus.com/bid/22014 · Note