CVE-2008-0217

EUVD-2008-0229
The script program in FreeBSD 5.0 through 7.0-PRERELEASE invokes openpty, which creates a pseudo-terminal with world-readable and world-writable permissions when it is not run as root, which allows local users to read data from the terminal of the user running script.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.9 UNKNOWN
LOCAL
MEDIUM
AV:L/AC:M/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 10%
Affected Products (NVD)
VendorProductVersion
freebsdfreebsd
5.0
freebsdfreebsd
5.5
freebsdfreebsd
6.0
freebsdfreebsd
6.1
freebsdfreebsd
6.2
freebsdfreebsd
7.0
freebsdfreebsd
7.0:pre-release
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
kfreebsd-5
dapper
ignored
edgy
ignored
feisty
ignored
gutsy
ignored
hardy
ignored
intrepid
ignored
jaunty
dne
karmic
dne
lucid
dne
maverick
dne
natty
dne
oneiric
dne
Common Weakness Enumeration
References
http://secunia.com/advisories/28498
http://security.FreeBSD.org/advisories/FreeBSD-SA-08:01.pty.asc
http://www.securityfocus.com/bid/27284
http://www.securitytracker.com/id?1019191
https://exchange.xforce.ibmcloud.com/vulnerabilities/39665
http://secunia.com/advisories/28498
http://security.FreeBSD.org/advisories/FreeBSD-SA-08:01.pty.asc
http://www.securityfocus.com/bid/27284
http://www.securitytracker.com/id?1019191
https://exchange.xforce.ibmcloud.com/vulnerabilities/39665