• info
• discussion
• exploit
• solution
• references

NetBSD ISO(4) Buffer Overflow Vulnerability

NetBSD 'ISO' is prone to a local buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer.

A local attacker may be able to exploit this issue to elevate privileges to superuser or cause denial-of-service conditions.