Vulnerabilities > CVE-2005-4741 - Unspecified vulnerability in Netbsd
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
NetBSD 1.6, NetBSD 2.0 through 2.1, and NetBSD-current before 20051031 allows local users to gain privileges by attaching a debugger to a setuid/setgid (P_SUGID) process that performs an exec without a reset of real credentials.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| OS | 8 |
References
- ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2005-013.txt.asc
- ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2005-013.txt.asc
- http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0157.html
- http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0157.html
- http://mail-index.netbsd.org/source-changes/2005/10/31/0001.html
- http://mail-index.netbsd.org/source-changes/2005/10/31/0001.html
- http://prdelka.blackart.org.uk/exploitz/prdelka-vs-BSD-ptrace.tar.gz
- http://prdelka.blackart.org.uk/exploitz/prdelka-vs-BSD-ptrace.tar.gz
- http://www.osvdb.org/20759
- http://www.osvdb.org/20759
- http://www.securityfocus.com/bid/15290
- http://www.securityfocus.com/bid/15290