Integer overflow in the ktruser function in NetBSD-current before 20061022, NetBSD 3 and 3-0 before 20061024, and NetBSD 2 before 20070209, when the kernel is built with the COMPAT_FREEBSD or COMPAT_DARWIN option, allows local users to cause a denial of service and possibly gain privileges.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Netbsd | Netbsd | 2.0 (including) | 2.0 (including) |
| Netbsd | Netbsd | 2.0.1 (including) | 2.0.1 (including) |
| Netbsd | Netbsd | 2.0.2 (including) | 2.0.2 (including) |
| Netbsd | Netbsd | 2.0.3 (including) | 2.0.3 (including) |
| Netbsd | Netbsd | 2.0.4 (including) | 2.0.4 (including) |
| Netbsd | Netbsd | 2.1 (including) | 2.1 (including) |
| Netbsd | Netbsd | 3.0.1 (including) | 3.0.1 (including) |
| Netbsd | Netbsd | 4.0 (including) | 4.0 (including) |