Vulnerability in Freebsd

CVE-2002-1669

pkg_add in FreeBSD 4.2 through 4.4 creates a temporary directory with world-searchable permissions, which may allow local users to modify world-writable parts of the package during installation.

EPSS: 0.003 (25.4th percentile) — read the EPSS interpretation.

Affected products

  • Freebsd — versions 4.2, 4.3, 4.4
  • N/a — versions n/a

References