Vulnerability in Freebsd
CVE-2010-2022
jail.c in jail in FreeBSD 8.0 and 8.1-PRERELEASE, when the "-l -U root" options are omitted, does not properly restrict access to the current working directory, which might allow local users to read, modify, or create arbitrary files via standard filesystem operations.
EPSS: 0.003 (24.9th percentile) — read the EPSS interpretation.
Affected products
- Freebsd — versions 8.0, 8.1-prerelease
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Patch, vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- cve@mitre.org (x_refsource_FREEBSD, vendor-advisory, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)