CVE-2004-2012

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-12-31 · updated 2026-06-16

Description

The systrace_exit function in the systrace utility for NetBSD-current and 2.0 before April 16, 2004, and certain FreeBSD ports, does not verify the owner of the /dec/systrace connection before setting euid to 0, which allows local users to gain root privileges.

Affected products

Netbsd: 2.0
Niels Provos Systrace: 1.1, 1.2, 1.3, 1.4, 1.5
Vladimir Kotal Systrace Port For Freebsd: 2004-03-09, 2004-06-02

References

http://marc.info/?l=bugtraq&m=108432258920570&w=2
http://secunia.com/advisories/11585
http://www.securityfocus.com/bid/10320
https://exchange.xforce.ibmcloud.com/vulnerabilities/16110
http://marc.info/?l=bugtraq&m=108432258920570&w=2
http://secunia.com/advisories/11585
http://www.securityfocus.com/bid/10320
https://exchange.xforce.ibmcloud.com/vulnerabilities/16110

Get alerted when CVE-2004-2012 or the next vulnerability affects your stack