CVE-2008-0217

The script program in FreeBSD 5.0 through 7.0-PRERELEASE invokes openpty, which creates a pseudo-terminal with world-readable and world-writable permissions when it is not run as root, which allows local users to read data from the terminal of the user running script.
Severity
UNKNOWN
AV:L/AC:M/Au:N/C:C/I:C/A:C
Atk. Vector
LOCAL
Atk. Complexity
MEDIUM
Base Score
CVSS 3.x
EPSS Score
Percentile: 5%
VendorProductVersion
freebsdfreebsd
5.0
freebsdfreebsd
5.5
freebsdfreebsd
6.0
freebsdfreebsd
6.1
freebsdfreebsd
6.2
freebsdfreebsd
7.0
freebsdfreebsd
7.0
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
kfreebsd-5
oneiric
dne
natty
dne
maverick
dne
lucid
dne
karmic
dne
jaunty
dne
intrepid
ignored
hardy
ignored
gutsy
ignored
feisty
ignored
edgy
ignored
dapper
ignored
Common Weakness Enumeration
References
http://secunia.com/advisories/28498
http://security.FreeBSD.org/advisories/FreeBSD-SA-08:01.pty.asc
http://www.securityfocus.com/bid/27284
http://www.securitytracker.com/id?1019191
https://exchange.xforce.ibmcloud.com/vulnerabilities/39665