NetBSD-current from 19980603 to 19990208.
Local users are able to read any kernel memory location.
In the version of netstat between the two dates above, a security hole exists which will allow non-root users to examine any kernel memory location. The code which was added to allow printing of kernel protocol control blocks does not have strict checks to make certain the memory being display is a protocol control block. Also, since the block contains information like TCP sequence numbers, users should generally not be allowed to examine these blocks. If this action cannot be taken easily, netstat can be disabled for non-root users. Thanks go to Michael Graff and Charles Hannum for the discovery and resolution of this bug.