Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The systrace_exit function in the systrace utility for NetBSD-current and 2.0 before April 16, 2004, and certain FreeBSD ports, does not verify the owner of the /dec/systrace connection before setting euid to 0, which allows local users to gain root privileges.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
NetBSD/FreeBSD移植的Systrace Exit函数访问验证权限提升漏洞
Vulnerability Description
NetBSD/FreeBSD是开放源代码操作系统，Systrace可通过强制系统调用的访问策略监视并且控制应用程序访问系统。 NetBSD/FreeBSD的Systrace的实现存在访问验证问题，本地攻击者可以利用这个漏洞提升权限。 systrace_exit()没有检查连接到systrace的进程是否属于超级用户权限，在exit操作时会设置EUID为0，因此本地攻击者可以利用这个问题提升权限。
CVSS Information
N/A
Vulnerability Type
N/A