Vulnerability in Freebsd
CVE-2002-0572
FreeBSD 4.5 and earlier, and possibly other BSD-based operating systems, allows local users to write to or read from restricted files by closing the file descriptors 0 (standard input), 1 (standard output), or 2 (standard error), which may then be reused by a called setuid process that intended to perform I/O on normal files.
EPSS: 0.016 (72.6th percentile) — read the EPSS interpretation.
Affected products
- Freebsd — versions 4.4, 4.5
- Openbsd — versions 2.0, 2.1, 2.2
- Sun Solaris — versions 2.5.1, 2.6, 7.0
- Sun Sunos — versions 5.5.1, 5.7, 5.8
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (mailing-list, x_refsource_VULNWATCH)
- cve@mitre.org (government-resource, x_refsource_CIAC, third-party-advisory)
- cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_BUGTRAQ, Patch)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)