6.2

CVE-2001-1145

fts routines in FreeBSD 4.3 and earlier, NetBSD before 1.5.2, and OpenBSD 2.9 and earlier can be forced to change (chdir) into a different directory than intended when the directory above the current directory is moved, which could cause scripts to perform dangerous actions on the wrong directories.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Freebsd ≫ Freebsd Version4.3
Netbsd ≫ Netbsd Version1.5
Netbsd ≫ Netbsd Version1.5.1
Openbsd ≫ Openbsd Version <= 2.9
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.3% 0.212
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.2 1.9 10
AV:L/AC:H/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:40.fts.v1.1.asc
http://archives.neohapsis.com/archives/netbsd/2001-q3/0204.html
Patch
Vendor Advisory
http://www.iss.net/security_center/static/8715.php
http://www.openbsd.org/errata28.html
Patch
http://www.osvdb.org/5466
http://www.securityfocus.com/bid/3205