medium4.6Public exploit code
CVE-2009-2793
The kernel in NetBSD, probably 5.0.1 and earlier, on x86 platforms does not properly handle a pre-commit failure of the iret instruction, which might allow loc…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- NetBSD 5.0.1 - 'IRET' General Protection Fault Handling Privilege Escalation2009-09-16 · local · bsd · Verified
Impact
The kernel in NetBSD, probably 5.0.1 and earlier, on x86 platforms does not properly handle a pre-commit failure of the iret instruction, which might allow local users to gain privileges via vectors related to a tempEIP pseudocode variable that is outside of the code-segment limits.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netbsd | Netbsd | through 5.0.1 Versions 0.8, 0.9, 1.0, 1.1, 1.2 |