CVE-2002-0820: High severity FreeBSD FreeBSD vulnerability

Published Aug 2, 2002

Updated

FreeBSD kernel 4.6 and earlier closes the file descriptors 0, 1, and 2 after they have already been assigned to /dev/null when the descriptors reference procfs or linprocfs, which could allow local users to reuse the file descriptors in a setuid or setgid program to modify critical data and gain privileges.

Affected Software

1 affected component

FreeBSD FreeBSD=4.6

Event History

Aug 2, 2002

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-0820?

CVE-2002-0820 is considered a high severity vulnerability due to its potential to allow local users to gain elevated privileges.

How do I fix CVE-2002-0820?

To fix CVE-2002-0820, upgrade to a FreeBSD version later than 4.6, which does not have this vulnerability.

Who is affected by CVE-2002-0820?

CVE-2002-0820 affects FreeBSD versions 4.6 and earlier, where local users can exploit the issue.

What can attackers do with CVE-2002-0820?

Attackers can reuse file descriptors in setuid or setgid programs to modify critical data and gain unauthorized access.

When was CVE-2002-0820 disclosed?

CVE-2002-0820 was disclosed in 2002 and is part of an older FreeBSD kernel vulnerability.