CVE-2000-0157: High severity NetBSD NetBSD vulnerability
NetBSD ptrace call on VAX allows local users to gain privileges by modifying the PSL contents in the debugging process.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable or restrict ptrace on VAX systems — e.g. remove or disable ptrace support in the kernel or otherwise ensure only trusted administrative accounts may use debugging/ptrace functionality so unprivileged local users cannot attach to processes and modify PSL contents.
NetBSD (VAX) ptrace ptrace usage = disabled or restricted to trusted users - Compensating control
Restrict local user access on affected VAX hosts: remove or disable untrusted/local accounts, limit who can log in or run debugging tools, and ensure only trusted administrators have physical or console access to systems until a vendor fix is available.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0157?
CVE-2000-0157 is considered a high-severity vulnerability as it allows local users to gain elevated privileges.
How do I fix CVE-2000-0157?
To fix CVE-2000-0157, you should upgrade to a patched version of NetBSD that addresses this privilege escalation issue.
Who is affected by CVE-2000-0157?
CVE-2000-0157 affects local users on NetBSD 1.4.1 running on VAX architecture.
What actions can be taken to mitigate CVE-2000-0157?
To mitigate CVE-2000-0157, restrict local user access and apply any available patches for NetBSD.
When was CVE-2000-0157 disclosed?
CVE-2000-0157 was disclosed in the year 2000.