Vulnerability in Netbsd

CVE-2004-2012

The systrace_exit function in the systrace utility for NetBSD-current and 2.0 before April 16, 2004, and certain FreeBSD ports, does not verify the owner of the /dec/systrace connection before setting euid to 0, which allows local users to gain root privileges.

EPSS: 0.009 (54.6th percentile) — read the EPSS interpretation.

Affected products

Netbsd — versions 2.0
Niels Provos_systrace — versions 1.1, 1.2, 1.3
Vladimir_kotal Systrace_port_for_freebsd — versions 2004-03-09, 2004-06-02
N/a — versions n/a

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)