CVE-2005-4779

CVE-2005-4779 describes a vulnerability in NetBSD 2.0.2 where a flaw in the verifiedexecioctl function within verified_exec.c disables the intended security functionality of the verified exec kernel subsystem. This misconfiguration, specifically the use of UIO_USERSPACE instead of UID_SYSSPACE, could allow local users to execute unauthorized "Trojan horse" programs. The vulnerability has a CVSS score of 3.6 (Low), indicating a local attack vector with low attack complexity and no authentication required, potentially leading to partial confidentiality and integrity impacts. Its FAUCET Risk Score is 8/100, and its EPSS score is very low, suggesting a minimal likelihood of exploitation. There is no evidence of active exploitation, and no public exploit intelligence (Metasploit, Nuclei, ExploitDB) is available. Furthermore, there is no community discussion or media coverage surrounding this CVE, indicating a lack of widespread attention or concern.