CVE-2008-0216

Published: Jan 16, 2008Modified: Apr 23, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

The ptsname function in FreeBSD 6.0 through 7.0-PRERELEASE does not properly verify that a certain portion of a device name is associated with a pty of a user who is calling the pt_chown function, which might allow local users to read data from the pty from another user.

Affected (13)

Products: Freebsd: Freebsd

Freebsd

1 product

Freebsd

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Freebsd Freebsd	Version 6.0
Freebsd Freebsd	Version 6.0 release
Freebsd Freebsd	Version 6.0 stable
Freebsd Freebsd	Version 6.1
Freebsd Freebsd	Version 6.1 release
Freebsd Freebsd	Version 6.1 release_p10
Freebsd Freebsd	Version 6.1 stable
Freebsd Freebsd	Version 6.2
Freebsd Freebsd	Version 6.2 stable
Freebsd Freebsd	Version 6.3
Freebsd Freebsd	Version 7.0
Freebsd Freebsd	Version 7.0 current
Freebsd Freebsd	Version 7.0 pre-release