CVE-2007-4304
UnknownEPSS 0.25%
Last modified
CVE-2007-4304 is a vulnerability of currently unknown severity. CerbNG for FreeBSD 4.8 does not properly implement VM protection when attempting to prevent system call wrapper races, which allows local users to have an unknown impact related to an "incorrect write protection of pages".. EPSS estimates a 0.25% chance of exploitation in the next 30 days.
Description
CerbNG for FreeBSD 4.8 does not properly implement VM protection when attempting to prevent system call wrapper races, which allows local users to have an unknown impact related to an "incorrect write protection of pages".
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cerb | Cerbng | 0.1 |
| Cerb | Cerbng | 0.2 |
| Cerb | Cerbng | 0.3 |
| Cerb | Cerbng | 0.4 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-4304?
CerbNG for FreeBSD 4.8 does not properly implement VM protection when attempting to prevent system call wrapper races, which allows local users to have an unknown impact related to an "incorrect write protection of pages".
How severe is CVE-2007-4304?
Severity scoring for CVE-2007-4304 is pending analysis. The EPSS model estimates a 0.25% probability of exploitation in the next 30 days.
How do I fix CVE-2007-4304?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2007
- CVE-2007-4295Unspecified vulnerability in Cisco IOS 12.0 through 12.4 all…
- CVE-2007-4296Unspecified vulnerability in assp.pl in Anti-Spam SMTP Proxy…
- CVE-2007-4297Multiple cross-site scripting (XSS) vulnerabilities in yorum…
- CVE-2007-4301Multiple cross-site scripting (XSS) vulnerabilities in the m…
- CVE-2007-4302Multiple race conditions in certain system call wrappers in …
- CVE-2007-4303Multiple race conditions in (1) certain rules and (2) argume…
- CVE-2007-4305Multiple race conditions in the (1) Sudo monitor mode and (2…
- CVE-2007-4306Multiple cross-site scripting (XSS) vulnerabilities in phpMy…
- CVE-2007-4307Multiple cross-site scripting (XSS) vulnerabilities in Store…
- CVE-2007-4308The (1) aac_cfg_open and (2) aac_compat_ioctl functions in t…
- CVE-2007-4309IBM Lotus Notes 5.x through 7.0.2 allows user-assisted remot…
- CVE-2007-4310The finger daemon (in.fingerd) in Sun Solaris 7 through 9 al…
Are you affected by CVE-2007-4304?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST