Vulnerability in Freebsd
CVE-1999-1572
cpio on FreeBSD 2.1.0, Debian GNU/Linux 3.0, and possibly other operating systems, uses a 0 umask when creating files using the -O (archive) or -F options, which creates the files with mode 0666 and allows local users to read or overwrite those files.
EPSS: 0.006 (43.1th percentile) — read the EPSS interpretation.
Affected products
- Freebsd — versions 2.1.0
- Mandrakesoft Mandrake_linux — versions 9.2, 10.0, 10.1
- Debian Debian_linux — versions 3.0
- Redhat Enterprise_linux — versions 4.0
- Redhat Enterprise_linux_desktop — versions 4.0
- Ubuntu Ubuntu_linux — versions 4.10
- N/a — versions n/a
Public proof-of-concept exploits
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (vendor-advisory, x_refsource_TRUSTIX)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory)
- cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)
- cve@mitre.org (Exploit, x_refsource_MISC)
Frequently asked questions
- What is CVE-1999-1572?
- CVE-1999-1572 is a vulnerability in Freebsd. Published 1996-07-16.
- Is CVE-1999-1572 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.