CVE-2001-0268

CVE-2001-0268 describes a local privilege escalation vulnerability affecting NetBSD 1.5 and earlier, and OpenBSD 2.8 and earlier, specifically when the USER_LDT kernel option is enabled. The i386_set_ldt system call fails to validate call gate targets, allowing a local attacker to create a malicious segment call gate in the Local Descriptor Table (LDT) pointing to an arbitrary kernel address. This flaw carries a CVSS score of 7.2 (High), indicating that it is easily exploitable locally with full confidentiality, integrity, and availability impacts. There is no known exploit intelligence, such as Metasploit modules or ExploitDB entries, and the vulnerability shows no evidence of active exploitation or community discussion.