Vulnerability in Freebsd
CVE-2002-0820
FreeBSD kernel 4.6 and earlier closes the file descriptors 0, 1, and 2 after they have already been assigned to /dev/null when the descriptors reference procfs or linprocfs, which could allow local users to reuse the file descriptors in a setuid or setgid program to modify critical data and gain privileges.
EPSS: 0.004 (33.4th percentile) — read the EPSS interpretation.
Affected products
- Freebsd — versions 4.6
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_VULNWATCH)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)