CVE-2001-0268

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

The i386_set_ldt system call in NetBSD 1.5 and earlier, and OpenBSD 2.8 and earlier, when the USER_LDT kernel option is enabled, does not validate a call gate target, which allows local users to gain root privileges by creating a segment call gate in the Local Descriptor Table (LDT) with a target that specifies an arbitrary kernel address.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
May 3, 2001
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2001

CVE-2001-026910.0pam_ldap authentication module in Solaris 8 allows remote attackers to bypass authentication via a NULL password.CVE-2001-02705.0Marconi ASX-1000 ASX switches allow remote attackers to cause a denial of service in the telnet and web management interfaces via a malformeCVE-2001-027110.0mailnews.cgi 1.3 and earlier allows remote attackers to execute arbitrary commands via a user name that contains shell metacharacters.CVE-2001-02725.0Directory traversal vulnerability in sendtemp.pl in W3.org Anaya Web development server allows remote attackers to read arbitrary files via CVE-2001-02732.6pgp4pine Pine/PGP interface version 1.75-6 does not properly check to see if a public key has expired when obtaining the keys via Gnu PrivacCVE-2001-02747.5kicq IRC client 1.0.0, and possibly later versions, allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.CVE-2001-02752.1Moby Netsuite Web Server 1.02 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTPCVE-2001-02766.4ext.dll in BadBlue 1.02.07 Personal Edition web server allows remote attackers to determine the physical path of the server by directly callCVE-2001-027710.0Buffer overflow in ext.dll in BadBlue 1.02.07 Personal Edition allows remote attackers to cause a denial of service and possibly execute arbCVE-2001-02784.6Vulnerability in linkeditor in HP MPE/iX 6.5 and earlier allows local users to gain privileges.CVE-2001-02797.2Buffer overflow in sudo earlier than 1.6.3p6 allows local users to gain root privileges.CVE-2001-028010.0Buffer overflow in MERCUR SMTP server 3.30 allows remote attackers to execute arbitrary commands via a long EXPN command.
CVE-2001-0268: High severity, CVSS 7.2 | Vulnix