[Forgot Password]
Login  Register Subscribe

30480

 
 

423868

 
 

253164

 
 

909

 
 

197077

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2001-1145Date: (C)2001-08-17   (M)2023-12-22


fts routines in FreeBSD 4.3 and earlier, NetBSD before 1.5.2, and OpenBSD 2.9 and earlier can be forced to change (chdir) into a different directory than intended when the directory above the current directory is moved, which could cause scripts to perform dangerous actions on the wrong directories.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 6.2
Exploit Score: 1.9
Impact Score: 10.0
 
CVSS V2 Metrics:
Access Vector: LOCAL
Access Complexity: HIGH
Authentication: NONE
Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE
  
Reference:
http://www.openbsd.org/errata28.html
BID-3205
OSVDB-5466
FreeBSD-SA-01:40
NetBSD-SA2001-016
bsd-fts-race-condition(8715)

CPE    4
cpe:/o:freebsd:freebsd:4.3
cpe:/o:netbsd:netbsd:1.5.1
cpe:/o:netbsd:netbsd:1.5
cpe:/o:openbsd:openbsd:2.9
...

© SecPod Technologies