CVE Vulnerabilities

CVE-2005-4741

Published: Dec 31, 2005 | Modified: Nov 21, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

NetBSD 1.6, NetBSD 2.0 through 2.1, and NetBSD-current before 20051031 allows local users to gain privileges by attaching a debugger to a setuid/setgid (P_SUGID) process that performs an exec without a reset of real credentials.

Affected Software

Name Vendor Start Version End Version
Netbsd Netbsd 1.6 (including) 1.6 (including)
Netbsd Netbsd 1.6.1 (including) 1.6.1 (including)
Netbsd Netbsd 1.6.2 (including) 1.6.2 (including)
Netbsd Netbsd 2.0 (including) 2.0 (including)
Netbsd Netbsd 2.0.1 (including) 2.0.1 (including)
Netbsd Netbsd 2.0.2 (including) 2.0.2 (including)
Netbsd Netbsd 2.0.3 (including) 2.0.3 (including)
Netbsd Netbsd 2.1 (including) 2.1 (including)

References