Unscored CVE-2005-4779 EUVD-2005-4772GHSA-gxf2-f6v3-qm53

verifiedexecioctl in verified_exec.c in NetBSD 2.0.2 calls NDINIT with UIO_USERSPACE rather than UID_SYSSPACE, which removes the functional…

Published Apr 13, 2006 · Updated Sep 16, 2024 · Assigned by mitre

Description

verifiedexecioctl in verified_exec.c in NetBSD 2.0.2 calls NDINIT with UIO_USERSPACE rather than UID_SYSSPACE, which removes the functionality of the verified exec kernel subsystem and might allow local users to execute Trojan horse programs.

References

http://releng.netbsd.org/cgi-bin/req-2-0.cgi?show=1988
[netbsd-announce] 20051031 Announcing update 2.0.3 - source only mailing-list
http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/dev/verified_exec.c.diff?r1=1.4&r2=1.4.2.1&f=h
20725 vdb-entry