Описание
jail.c in jail in FreeBSD 8.0 and 8.1-PRERELEASE, when the "-l -U root" options are omitted, does not properly restrict access to the current working directory, which might allow local users to read, modify, or create arbitrary files via standard filesystem operations.
Ссылки
- Vendor Advisory
- PatchVendor Advisory
- Vendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:o:freebsd:freebsd:8.0:*:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:8.1-prerelease:*:*:*:*:*:*:*
EPSS
Процентиль: 35%
0.00142
Низкий
3.3 Low
CVSS2
Дефекты
CWE-264
Связанные уязвимости
debian
больше 15 лет назад
jail.c in jail in FreeBSD 8.0 and 8.1-PRERELEASE, when the "-l -U root ...
github
больше 3 лет назад
jail.c in jail in FreeBSD 8.0 and 8.1-PRERELEASE, when the "-l -U root" options are omitted, does not properly restrict access to the current working directory, which might allow local users to read, modify, or create arbitrary files via standard filesystem operations.
EPSS
Процентиль: 35%
0.00142
Низкий
3.3 Low
CVSS2
Дефекты
CWE-264