CVE-2001-0268 Privilege escalation in n/a

What is CVE-2001-0268?

CVE-2001-0268 is a high-severity vulnerability in Netbsd Netbsd, published on 7 May 2001. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

The i386_set_ldt system call in NetBSD 1.5 and earlier, and OpenBSD 2.8 and earlier, when the USER_LDT kernel option is enabled, does not validate a call gate target, which allows local users to gain root privileges by creating a segment call gate in the Local Descriptor Table (LDT) with a target that specifies an arbitrary kernel address.

Which versions are affected by CVE-2001-0268?

It affects 2 products.

Products include Netbsd Netbsd, Openbsd Openbsd.

How do I fix CVE-2001-0268?

No fix has been published for CVE-2001-0268 yet. Limit exposure of the affected software until one is available.

Is CVE-2001-0268 being exploited?

There is no known exploitation of CVE-2001-0268 in the wild and no public exploit code.

Other vulnerabilities in Netbsd Netbsd

• CVE-2017-1000374 Security feature bypass in n/a Critical 9.8
• CVE-2017-1000375 Memory corruption in n/a Critical 9.8
• CVE-2017-1000378 Denial of service in n/a Critical 9.8
• CVE-2015-8212 Command injection in n/a Critical 9.8
• CVE-2008-3584 Denial of service in n/a Critical 9.3

All Netbsd Netbsd vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-j745-h4hq-59r2.