CVE-2010-2022: Low severity FreeBSD FreeBSD vulnerability

Published May 28, 2010

Updated

jail.c in jail in FreeBSD 8.0 and 8.1-PRERELEASE, when the "-l -U root" options are omitted, does not properly restrict access to the current working directory, which might allow local users to read, modify, or create arbitrary files via standard filesystem operations.

Affected Software

2 affected components

FreeBSD FreeBSD=8.0

FreeBSD FreeBSD=8.1-prerelease

Remediation

Patch Available

http://www.vupen.com/english/advisories/2010/1247

Event History

May 28, 2010

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Data Sourced

via NVD·06:30 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2010-2022?

CVE-2010-2022 is considered a moderate severity vulnerability that can allow local users to access unauthorized files.

How do I fix CVE-2010-2022?

To fix CVE-2010-2022, ensure the use of the "-l -U root" options when configuring jail in FreeBSD.

Who is affected by CVE-2010-2022?

CVE-2010-2022 affects FreeBSD versions 8.0 and 8.1-PRERELEASE when specific jail options are omitted.

What type of vulnerability is CVE-2010-2022?

CVE-2010-2022 is a local privilege escalation vulnerability in the FreeBSD jail implementation.

Can CVE-2010-2022 be exploited remotely?

CVE-2010-2022 cannot be exploited remotely as it specifically affects local users operating within the system.