1 results (0.007 seconds)

CVSS: 7.8EPSS: 0%CPEs: 8EXPL: 2

31 Dec 2004 — The systrace_exit function in the systrace utility for NetBSD-current and 2.0 before April 16, 2004, and certain FreeBSD ports, does not verify the owner of the /dec/systrace connection before setting euid to 0, which allows local users to gain root privileges. • https://www.exploit-db.com/exploits/24113 •