CVE-2001-0268: High severity OpenBSD OpenBSD vulnerability
The i386setldt system call in NetBSD 1.5 and earlier, and OpenBSD 2.8 and earlier, when the USERLDT kernel option is enabled, does not validate a call gate target, which allows local users to gain root privileges by creating a segment call gate in the Local Descriptor Table (LDT) with a target that specifies an arbitrary kernel address.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2001-0268?
CVE-2001-0268 has a critical severity rating due to its potential to allow local users to gain root privileges.
How do I fix CVE-2001-0268?
To fix CVE-2001-0268, users should upgrade to a version of OpenBSD later than 2.8 or NetBSD later than 1.5, where this vulnerability is patched.
Who is affected by CVE-2001-0268?
CVE-2001-0268 affects local users of NetBSD 1.5 and earlier, and OpenBSD 2.8 and earlier when the USER_LDT kernel option is enabled.
What does CVE-2001-0268 exploit?
CVE-2001-0268 exploits the lack of validation on a call gate target in the i386_set_ldt system call.
Can CVE-2001-0268 be exploited remotely?
No, CVE-2001-0268 requires local access to the system to exploit the vulnerability.