CVE-2007-0257

Unspecified vulnerability in the expand_stack function in grsecurity PaX allows local users to gain privileges via unspecified vectors. NOTE: the grsecurity developer has disputed this issue, stating that "the function they claim the vulnerability to be in is a trivial function, which can, and has been, easily checked for any supposed vulnerabilities." The developer also cites a past disclosure that was not proven. As of 20070120, the original researcher has released demonstration code

• http://forums.grsecurity.net/viewtopic.php?t=1646Vendor Advisory
• http://grsecurity.net/news.php#digitalfud
• http://osvdb.org/32727
• http://secunia.com/advisories/23713
• http://securitytracker.com/id?1017509
• http://www.digitalarmaments.com/news_news.shtmlVendor Advisory, URL Repurposed
• http://www.digitalarmaments.com/pre2007-00018659.htmlVendor Advisory, URL Repurposed
• http://www.securityfocus.com/archive/1/456626/100/0/threaded
• http://www.securityfocus.com/archive/1/456722/100/0/threaded
• http://www.securityfocus.com/archive/1/457509/100/0/threaded
• http://www.securityfocus.com/archive/1/462302/100/100/threaded
• http://www.securityfocus.com/bid/22014
• http://www.vupen.com/english/advisories/2007/0155
• http://forums.grsecurity.net/viewtopic.php?t=1646Vendor Advisory
• http://grsecurity.net/news.php#digitalfud
• http://osvdb.org/32727
• http://secunia.com/advisories/23713
• http://securitytracker.com/id?1017509
• http://www.digitalarmaments.com/news_news.shtmlVendor Advisory, URL Repurposed
• http://www.digitalarmaments.com/pre2007-00018659.htmlVendor Advisory, URL Repurposed
• http://www.securityfocus.com/archive/1/456626/100/0/threaded
• http://www.securityfocus.com/archive/1/456722/100/0/threaded
• http://www.securityfocus.com/archive/1/457509/100/0/threaded
• http://www.securityfocus.com/archive/1/462302/100/100/threaded
• http://www.securityfocus.com/bid/22014
• http://www.vupen.com/english/advisories/2007/0155

Published

Jan 16, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-0251Integer underflow in the DecodeGRE function in src/decode.c …
• CVE-2007-0252Unspecified vulnerability in easy-content filemanager allows…
• CVE-2007-0253Unspecified vulnerability in the grsecurity patch has unspec…
• CVE-2007-0254Format string vulnerability in the errors_create_window func…
• CVE-2007-0255XINE 0.99.4 allows user-assisted remote attackers to cause a…
• CVE-2007-0256VideoLAN VLC 0.8.6a allows remote attackers to cause a denia…
• CVE-2007-0258Cross-site scripting (XSS) vulnerability in index.php in (1)…
• CVE-2007-0259Ezboxx Portal System Beta 0.7.6 and earlier allows remote at…
• CVE-2007-0260PHP remote file inclusion vulnerability in index.php in Naig…
• CVE-2007-0261snews.php in sNews 1.5.30 and earlier does not properly exit…
• CVE-2007-0262WordPress 2.0.6, and 2.1Alpha 3 (SVN:4662), does not properl…
• CVE-2007-0263Unspecified vulnerability in Total Commander before 6.5.6 al…