PT-2001-1915 · Netbsd · Netbsd

Published 2001-10-12 · Updated 2017-12-19 · CVE-2001-0734

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: NetBSD versions 1.4.1 through 1.5

Description: The issue concerns the Hitachi Super-H architecture in NetBSD, where a local user can gain privileges due to improper handling of modified Status Register contents by the sigreturn system call or the process write regs kernel routine.

Recommendations: For NetBSD versions 1.4.1 through 1.5, consider restricting access to the sigreturn system call and the process write regs kernel routine until a patch is available. As a temporary workaround, consider disabling the use of the Hitachi Super-H architecture in NetBSD until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2001-0734

Affected Products

Netbsd

References · 4

• ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-008.txt.asc · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-0734 · Security Note
• http://securityfocus.com/bid/2810 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6637 · Note