CVE-2002-0572: High severity Sun Solaris vulnerability
FreeBSD 4.5 and earlier, and possibly other BSD-based operating systems, allows local users to write to or read from restricted files by closing the file descriptors 0 (standard input), 1 (standard output), or 2 (standard error), which may then be reused by a called setuid process that intended to perform I/O on normal files.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0572?
CVE-2002-0572 is considered a moderate severity vulnerability due to its potential to allow local users unauthorized access to restricted files.
How do I fix CVE-2002-0572?
To mitigate CVE-2002-0572, ensure proper file descriptor management and limit the use of setuid processes where possible.
Who is affected by CVE-2002-0572?
CVE-2002-0572 affects local users on FreeBSD 4.5 and earlier, Solaris 2.5.1 and 2.6, and certain versions of OpenBSD.
What kind of vulnerability is CVE-2002-0572?
CVE-2002-0572 is a local privilege escalation vulnerability that can be exploited by closing standard file descriptors.
Can CVE-2002-0572 be exploited remotely?
No, CVE-2002-0572 cannot be exploited remotely as it requires local access to the system.