First published: Mon Mar 12 2001(Updated: )
The kernel in FreeBSD 3.2 follows symbolic links when it creates core dump files, which allows local attackers to modify arbitrary files.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
FreeBSD Kernel | =3.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2000-0375 is considered a high-severity vulnerability due to its potential impact on file integrity.
To mitigate CVE-2000-0375, upgrade to a newer version of FreeBSD that does not follow symbolic links when creating core dumps.
CVE-2000-0375 affects users and administrators of FreeBSD 3.2 systems.
CVE-2000-0375 can enable local attackers to manipulate arbitrary files on the system.
CVE-2000-0375 exploits the kernel's handling of symbolic links during core dump creation, leading to unauthorized file modifications.