Vulnerability in Freebsd

CVE-2002-2092

Race condition in exec in OpenBSD 4.0 and earlier, NetBSD 1.5.2 and earlier, and FreeBSD 4.4 and earlier allows local users to gain privileges by attaching a debugger to a process before the kernel has determined that the process is setuid or setgid.

EPSS: 0.003 (22.9th percentile) — read the EPSS interpretation.

Affected products

  • Freebsd — versions 2.0, 2.1.0, 2.2
  • Netbsd — versions 1.3, 1.3.1, 1.3.2
  • Openbsd — versions 2.0, 2.1, 2.2
  • N/a — versions n/a

References