VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 31, 2004· Updated Jun 16, 2026

CVE-2004-2012

CVE-2004-2012

Description

The systrace_exit function in the systrace utility for NetBSD-current and 2.0 before April 16, 2004, and certain FreeBSD ports, does not verify the owner of the /dec/systrace connection before setting euid to 0, which allows local users to gain root privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10
  • Libevent Project/Systrace5 versions
    cpe:2.3:a:niels:provos_systrace:1.1:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:niels:provos_systrace:1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:niels:provos_systrace:1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:niels:provos_systrace:1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:niels:provos_systrace:1.4:*:*:*:*:*:*:*
    • cpe:2.3:a:niels:provos_systrace:1.5:*:*:*:*:*:*:*
  • Vladimir Kotal/Systrace Port For Freebsd2 versions
    cpe:2.3:a:vladimir_kotal:systrace_port_for_freebsd:2004-03-09:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:vladimir_kotal:systrace_port_for_freebsd:2004-03-09:*:*:*:*:*:*:*
    • cpe:2.3:a:vladimir_kotal:systrace_port_for_freebsd:2004-06-02:*:*:*:*:*:*:*
  • NetBSD/NetBSD
    cpe:2.3:o:netbsd:netbsd:2.0:*:*:*:*:*:*:*
  • NetBSD/systracellm-create
    Range: <=2.0
  • FreeBSD/systracellm-create

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.

CVE-2004-2012 · VYPR