| Package | Affected versions | Patched versions |
|---|---|---|
| provos systrace | = 1.1= 1.2= 1.3= 1.4= 1.5 | |
| systrace port for freebsd | = 2004-03-09= 2004-06-02 |
The systrace_exit function in the systrace utility for NetBSD-current and 2.0 before April 16, 2004, and certain FreeBSD ports, does not verify the owner of the /dec/systrace connection before setting euid to 0, which allows local users to gain root privileges.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free