CVE-2004-2012

The CVE-2004-2012 entry concerns the systrace_exit function in the systrace utility used on NetBSD-current (pre-April 16, 2004) and certain FreeBSD ports. The vulnerability arises because the code path does not verify the owner of the /dec/systrace connection before setting the effective user ID ...