CVE-2004-2012 in NetBSDinfo

Zusammenfassung (Englisch)

The systrace_exit function in the systrace utility for NetBSD-current and 2.0 before April 16, 2004, and certain FreeBSD ports, does not verify the owner of the /dec/systrace connection before setting euid to 0, which allows local users to gain root privileges.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservieren

04.05.2005

Veröffentlichung

31.12.2004

Einträge

1: VDB-22983

CPE

bereit

Exploit

Download

CVSS

8.4

EPSS

0.00306

Aktivitäten

Very Low

Quellen

Want to know what is going to be exploited?

We predict KEV entries!