Netbsd : Security Vulnerabilities, CVEs, CVSS score between 3 and 3.99
The make include files in NetBSD before 1.6.2, as used in pmake 1.111 and other products, allow local users to overwrite arbitrary files via a symlink attack on a /tmp/_depend##### temporary file, related to (1) bsd.lib.mk and (2) bsd.prog.mk.
Max CVSS
3.3
EPSS Score
0.04%
Published
2011-05-23
Updated
2017-08-17
verifiedexecioctl in verified_exec.c in NetBSD 2.0.2 calls NDINIT with UIO_USERSPACE rather than UID_SYSSPACE, which removes the functionality of the verified exec kernel subsystem and might allow local users to execute Trojan horse programs.
Max CVSS
3.6
EPSS Score
0.04%
Published
2005-12-31
Updated
2008-09-05
Race condition in exec in OpenBSD 4.0 and earlier, NetBSD 1.5.2 and earlier, and FreeBSD 4.4 and earlier allows local users to gain privileges by attaching a debugger to a process before the kernel has determined that the process is setuid or setgid.
Max CVSS
3.7
EPSS Score
0.04%
Published
2002-12-31
Updated
2017-12-19
3 vulnerabilities found