CVE-2002-1500 Information

Description

Buffer overflow in (1) mrinfo (2) mtrace and (3) pppd in NetBSD 1.4.x through 1.6 allows local users to gain privileges by executing the programs after filling the file descriptor tables which produces file descriptors larger than FD_SETSIZE which are not checked by FD_SET().

Reference

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-014.txt.asc http://www.iss.net/security_center/static/10114.php http://www.securityfocus.com/bid/5727