Beveiligingsadvies

CVE-2002-0820

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2002-08-02 04:00:00
Laatst bijgewerkt 2024-08-08 03:03:49
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

FreeBSD kernel 4.6 and earlier closes the file descriptors 0, 1, and 2 after they have already been assigned to /dev/null when the descriptors reference procfs or linprocfs, which could allow local users to reuse the file descriptors in a setuid or setgid program to modify critical data and gain privileges.