FreeBSD Security Advisory FreeBSD-SA-04:15.syscons

[Darren Pilgrim]

> FreeBSD-SA-04:15.syscons
<...>
> IV.  Workaround
> 
> There is no known workaround.  However, this bug is only exploitable
> by users who have access to the physical console or can otherwise open
> a /dev/ttyv* device node.

Is there anything in the base system that, by design or flaw, can be used by
a non-root user to open a ttyv device?

Is the tty snoop device vulnerable by proxy?