high7.2Public exploit code
CVE-2004-2012
The systrace_exit function in the systrace utility for NetBSD-current and 2.0 before April 16, 2004, and certain FreeBSD ports, does not verify the owner of th…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- NetBSD/FreeBSD Port Systrace 1.x - Exit Routine Access Validation Privilege Escalation2004-05-11 · local · bsd · Verified
Impact
The systrace_exit function in the systrace utility for NetBSD-current and 2.0 before April 16, 2004, and certain FreeBSD ports, does not verify the owner of the /dec/systrace connection before setting euid to 0, which allows local users to gain root privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Niels | Provos Systrace | Versions 1.1, 1.2, 1.3, 1.4, 1.5 |
| Vladimir Kotal | Systrace Port For Freebsd | Versions 2004-03-09, 2004-06-02 |
| Netbsd | Netbsd | Version 2.0 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=108432258920570&w=2
- http://secunia.com/advisories/11585
- http://www.securityfocus.com/bid/10320
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16110
- http://marc.info/?l=bugtraq&m=108432258920570&w=2
- http://secunia.com/advisories/11585
- http://www.securityfocus.com/bid/10320
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16110