6.9

CVE-2008-0217

The script program in FreeBSD 5.0 through 7.0-PRERELEASE invokes openpty, which creates a pseudo-terminal with world-readable and world-writable permissions when it is not run as root, which allows local users to read data from the terminal of the user running script.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Freebsd ≫ Freebsd Version5.0
Freebsd ≫ Freebsd Version5.5
Freebsd ≫ Freebsd Version6.0
Freebsd ≫ Freebsd Version6.1
Freebsd ≫ Freebsd Version6.2
Freebsd ≫ Freebsd Version7.0
Freebsd ≫ Freebsd Version7.0 Updatepre-release
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.3% 0.21
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.9 3.4 10
AV:L/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/28498
http://security.FreeBSD.org/advisories/FreeBSD-SA-08:01.pty.asc
Patch
http://www.securityfocus.com/bid/27284
http://www.securitytracker.com/id?1019191
https://exchange.xforce.ibmcloud.com/vulnerabilities/39665