CVE-2009-2793 in NetBSD
Summary
The kernel in NetBSD, probably 5.0.1 and earlier, on x86 platforms does not properly handle a pre-commit failure of the iret instruction, which might allow local users to gain privileges via vectors related to a tempEIP pseudocode variable that is outside of the code-segment limits.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
08/17/2009
Disclosure
09/18/2009
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 50120 | NetBSD access control | 264 | Proof-of-Concept | Not defined | CVE-2009-2793 |