CVE-2005-4779 | BDVDB-2026-16213 Detail

Description#

verifiedexecioctl in verified_exec.c in NetBSD 2.0.2 calls NDINIT with UIO_USERSPACE rather than UID_SYSSPACE, which removes the functionality of the verified exec kernel subsystem and might allow local users to execute Trojan horse programs.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://releng.netbsd.org/cgi-bin/req-2-0.cgi?show=1988
http://mail-index.netbsd.org/netbsd-announce/2005/10/31/0000.html
http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/dev/verified_exec.c.diff?r1=1.4&r2=1.4.2.1&f=h
http://www.osvdb.org/20725

Exploit#

No public exploit known

History#

Version 12006-04-13Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.