CVE-2002-0824

Published: Aug 12, 2002Modified: Apr 16, 2026

6.9

Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 3.4 / Impact: 10.0

Source: NVD

Description

BSD pppd allows local users to change the permissions of arbitrary files via a symlink attack on a file that is specified as a tty device.

Affected (1)

Products: Freebsd: Point To Point Protocol Daemon

1 product

Point To Point Protocol Daemon

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Freebsd Point To Point Protocol Daemon	All versions

Related CWEs

Improper Link Resolution Before File Access ('Link Following')

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

References (10)

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-010.txt.asc (unsafe URL)

Source: cve@mitre.org

Broken Link

http://marc.info/?l=bugtraq&m=102812546815606&w=2

Source: cve@mitre.org

Issue TrackingMailing ListThird Party Advisory

http://www.iss.net/security_center/static/9738.php

Source: cve@mitre.org

Broken Link

http://www.openbsd.org/errata31.html

Source: cve@mitre.org

Third Party Advisory

http://www.securityfocus.com/bid/5355

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-010.txt.asc (unsafe URL)

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://marc.info/?l=bugtraq&m=102812546815606&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingMailing ListThird Party Advisory

http://www.iss.net/security_center/static/9738.php

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.openbsd.org/errata31.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.securityfocus.com/bid/5355

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

Timeline

No history available yet.