CVE-2008-0777: Medium severity freebsd kernel vulnerability
Published Feb 15, 2008
·Updated
The sendfile system call in FreeBSD 5.5 through 7.0 does not check the access flags of the file descriptor used for sending a file, which allows local users to read the contents of write-only files.
Affected Software
4 affected components
FreeBSD FreeBSD=6.3
FreeBSD FreeBSD=5.5
FreeBSD FreeBSD=7.0
FreeBSD FreeBSD=6.2
Remediation
Patch Available
Event History
Feb 15, 2008
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-0777?
CVE-2008-0777 is rated as a moderate severity vulnerability due to its potential to leak confidential data from write-only files.
2
How do I fix CVE-2008-0777?
To fix CVE-2008-0777, upgrade your FreeBSD system to a version that has patched this vulnerability.
3
What systems are affected by CVE-2008-0777?
CVE-2008-0777 affects FreeBSD versions 5.5, 6.2, 6.3, and 7.0.
4
What does CVE-2008-0777 exploit?
CVE-2008-0777 exploits the sendfile system call's failure to check file descriptor access flags.
5
Who can exploit CVE-2008-0777?
CVE-2008-0777 can be exploited by local users on affected FreeBSD systems.