CVE-2001-1145: Medium severity OpenBSD OpenBSD vulnerability
fts routines in FreeBSD 4.3 and earlier, NetBSD before 1.5.2, and OpenBSD 2.9 and earlier can be forced to change (chdir) into a different directory than intended when the directory above the current directory is moved, which could cause scripts to perform dangerous actions on the wrong directories.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2001-1145?
CVE-2001-1145 is considered a medium severity vulnerability due to its potential to allow unauthorized access to unintended directories.
How do I fix CVE-2001-1145?
To fix CVE-2001-1145, upgrade to a version of the OS that is not vulnerable, such as OpenBSD 2.9 or later, NetBSD 1.5.2 or later, or FreeBSD 4.4 or later.
What systems are affected by CVE-2001-1145?
CVE-2001-1145 affects FreeBSD 4.3 and earlier, NetBSD before 1.5.2, and OpenBSD 2.9 and earlier.
What type of vulnerability is CVE-2001-1145?
CVE-2001-1145 is a directory traversal vulnerability that can lead to unintended directory changes.
Is CVE-2001-1145 still a risk in modern systems?
CVE-2001-1145 is not typically a risk in modern systems that have been updated past the affected versions.