Race condition in exec in OpenBSD 4.0 and earlier, NetBSD 1.5.2 and earlier, and FreeBSD 4.4 and earlier allows local users to gain privileges by attaching a debugger to a process before the kernel has determined that the process is setuid or setgid.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Freebsd | Freebsd | 2.0 (including) | 2.0 (including) |
| Freebsd | Freebsd | 2.1.0 (including) | 2.1.0 (including) |
| Freebsd | Freebsd | 2.2 (including) | 2.2 (including) |
| Freebsd | Freebsd | 2.2.2 (including) | 2.2.2 (including) |
| Freebsd | Freebsd | 2.2.3 (including) | 2.2.3 (including) |
| Freebsd | Freebsd | 2.2.4 (including) | 2.2.4 (including) |
| Freebsd | Freebsd | 2.2.5 (including) | 2.2.5 (including) |
| Freebsd | Freebsd | 2.2.6 (including) | 2.2.6 (including) |
| Freebsd | Freebsd | 2.2.8 (including) | 2.2.8 (including) |
| Freebsd | Freebsd | 3.0 (including) | 3.0 (including) |
| Freebsd | Freebsd | 3.1 (including) | 3.1 (including) |
| Freebsd | Freebsd | 3.2 (including) | 3.2 (including) |
| Freebsd | Freebsd | 3.3 (including) | 3.3 (including) |
| Freebsd | Freebsd | 3.4 (including) | 3.4 (including) |
| Freebsd | Freebsd | 3.5 (including) | 3.5 (including) |
| Freebsd | Freebsd | 3.5.1 (including) | 3.5.1 (including) |
| Freebsd | Freebsd | 4.0 (including) | 4.0 (including) |
| Freebsd | Freebsd | 4.1 (including) | 4.1 (including) |
| Freebsd | Freebsd | 4.1.1 (including) | 4.1.1 (including) |
| Freebsd | Freebsd | 4.1.1-release (including) | 4.1.1-release (including) |
| Freebsd | Freebsd | 4.1.1-stable (including) | 4.1.1-stable (including) |
| Freebsd | Freebsd | 4.2 (including) | 4.2 (including) |
| Freebsd | Freebsd | 4.2-stable (including) | 4.2-stable (including) |
| Freebsd | Freebsd | 4.3 (including) | 4.3 (including) |
| Freebsd | Freebsd | 4.3-release (including) | 4.3-release (including) |
| Freebsd | Freebsd | 4.3-releng (including) | 4.3-releng (including) |
| Freebsd | Freebsd | 4.3-stable (including) | 4.3-stable (including) |
| Freebsd | Freebsd | 4.4 (including) | 4.4 (including) |
| Freebsd | Freebsd | 4.4-releng (including) | 4.4-releng (including) |
| Freebsd | Freebsd | 4.4-stable (including) | 4.4-stable (including) |
| Netbsd | Netbsd | 1.3 (including) | 1.3 (including) |
| Netbsd | Netbsd | 1.3.1 (including) | 1.3.1 (including) |
| Netbsd | Netbsd | 1.3.2 (including) | 1.3.2 (including) |
| Netbsd | Netbsd | 1.3.3 (including) | 1.3.3 (including) |
| Netbsd | Netbsd | 1.4 (including) | 1.4 (including) |
| Netbsd | Netbsd | 1.4.1 (including) | 1.4.1 (including) |
| Netbsd | Netbsd | 1.4.2 (including) | 1.4.2 (including) |
| Netbsd | Netbsd | 1.4.3 (including) | 1.4.3 (including) |
| Netbsd | Netbsd | 1.5 (including) | 1.5 (including) |
| Netbsd | Netbsd | 1.5.1 (including) | 1.5.1 (including) |
| Netbsd | Netbsd | 1.5.2 (including) | 1.5.2 (including) |
| Openbsd | Openbsd | 2.0 (including) | 2.0 (including) |
| Openbsd | Openbsd | 2.1 (including) | 2.1 (including) |
| Openbsd | Openbsd | 2.2 (including) | 2.2 (including) |
| Openbsd | Openbsd | 2.3 (including) | 2.3 (including) |
| Openbsd | Openbsd | 2.4 (including) | 2.4 (including) |
| Openbsd | Openbsd | 2.5 (including) | 2.5 (including) |
| Openbsd | Openbsd | 2.6 (including) | 2.6 (including) |
| Openbsd | Openbsd | 2.7 (including) | 2.7 (including) |
| Openbsd | Openbsd | 2.8 (including) | 2.8 (including) |
| Openbsd | Openbsd | 2.9 (including) | 2.9 (including) |
| Openbsd | Openbsd | 3.0 (including) | 3.0 (including) |