First published: Tue Jun 11 2002(Updated: )
FreeBSD 4.5 and earlier, and possibly other BSD-based operating systems, allows local users to write to or read from restricted files by closing the file descriptors 0 (standard input), 1 (standard output), or 2 (standard error), which may then be reused by a called setuid process that intended to perform I/O on normal files.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
FreeBSD FreeBSD | =4.4-releng | |
FreeBSD FreeBSD | =4.5-release | |
FreeBSD FreeBSD | =4.5-stable | |
Openbsd Openbsd | =2.0 | |
Openbsd Openbsd | =2.1 | |
Openbsd Openbsd | =2.2 | |
Openbsd Openbsd | =2.3 | |
Sun Solaris | =2.5.1 | |
Sun Solaris | =2.6 | |
Sun Solaris | =7.0 | |
Sun Solaris | =8.0 | |
Sun SunOS | ||
Sun SunOS | =5.5.1 | |
Sun SunOS | =5.7 | |
Sun SunOS | =5.8 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.