Vulnerability in Freebsd

CVE-2008-0217

The script program in FreeBSD 5.0 through 7.0-PRERELEASE invokes openpty, which creates a pseudo-terminal with world-readable and world-writable permissions when it is not run as root, which allows local users to read data from the terminal of the user running script.

EPSS: 0.003 (21.8th percentile) — read the EPSS interpretation.

Affected products

Freebsd — versions 5.0, 5.5, 6.0
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

secteam@freebsd.org (x_refsource_SECUNIA, third-party-advisory)
secteam@freebsd.org (vdb-entry, x_refsource_SECTRACK)
secteam@freebsd.org (vdb-entry, x_refsource_XF)
secteam@freebsd.org (vdb-entry, x_refsource_BID)
secteam@freebsd.org (x_refsource_FREEBSD, vendor-advisory, Patch)