Vulnerability in Freebsd

CVE-2000-0595

libedit searches for the .editrc file in the current directory instead of the user's home directory, which may allow local users to execute arbitrary commands by installing a modified .editrc in another directory.

EPSS: 0.005 (40.9th percentile) — read the EPSS interpretation.

Affected products

  • Freebsd — versions 3.0, 3.1, 3.2
  • N/a — versions n/a

References

  • cve@mitre.org (x_refsource_OSVDB, vdb-entry)
  • cve@mitre.org (x_refsource_FREEBSD, Exploit, vendor-advisory, Patch, Vendor Advisory)
  • cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID, Vendor Advisory)