Vulnerabilities > CVE-2004-2012

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
niels
vladimir-kotal
netbsd
exploit available
NVD
Published: 2004-12-31
Updated: 2024-11-20

Summary

The systrace_exit function in the systrace utility for NetBSD-current and 2.0 before April 16, 2004, and certain FreeBSD ports, does not verify the owner of the /dec/systrace connection before setting euid to 0, which allows local users to gain root privileges.

Vulnerable Configurations

Part Description Count
Application
Niels
5
Application
Vladimir_Kotal
2
OS
Netbsd
1

Exploit-Db

descriptionNetBSD/FreeBSD Port Systrace 1.x Exit Routine Access Validation Privilege Escalation Vulnerability. CVE-2004-2012. Local exploit for bsd platform
idEDB-ID:24113
last seen2016-02-02
modified2004-05-11
published2004-05-11
reporterStefan Esser
sourcehttps://www.exploit-db.com/download/24113/
titleNetBSD/FreeBSD Port Systrace 1.x - Exit Routine Access Validation Privilege Escalation Vulnerability

References