Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
NetBSD 1.6, NetBSD 2.0 through 2.1, and NetBSD-current before 20051031 allows local users to gain privileges by attaching a debugger to a setuid/setgid (P_SUGID) process that performs an exec without a reset of real credentials.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
NetBSD本地PTrace权限提升漏洞
Vulnerability Description
NetBSD是一款免费开放源代码的UNIX性质的操作系统。 NetBSD的ptrace进程追踪工具存在本地权限提升漏洞。进程标签P_SUGID用于追踪通过set-id执行位获得权限的进程。ptrace检查这个标签确定是否应允许附带调试器。进程在调用exec()时，即使真实凭据和有效凭据不同，仍会清除这个标签。这会允许本地攻击者ptrace特权进程，调用任意系统调用，并更改追踪进程的行为，导致完全的系统入侵。
CVSS Information
N/A
Vulnerability Type
N/A