NetBSD SVR4 compatibility device creation Vulnerability

NetBSD SVR4 compatibility device creation Vulnerability

Solution:
NetBSD has made a patch available for NetBSD 1.3.3 which corrects the SVR4_MAKEDEV script. You can find this patch at:

ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/patches/19990419-SVR4_MAKEDEV

NetBSD-current users should upgrade to a source tree later than 19990420.

You can also remove the offending device file and create a correct one manually:

# /bin/rm -f /emul/svr4/dev/wabi
# /sbin/mknod /emul/svr4/dev/wabi c 2 2
#/bin/chmod u=rw,g=rw,o=rw /emul/svr4/dev/wabi