CVE-2008-0217

Published: Jan 16, 2008Modified: Apr 23, 2026

6.9

Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 3.4 / Impact: 10.0

Source: NVD

Description

The script program in FreeBSD 5.0 through 7.0-PRERELEASE invokes openpty, which creates a pseudo-terminal with world-readable and world-writable permissions when it is not run as root, which allows local users to read data from the terminal of the user running script.

Affected (7)

Products: Freebsd: Freebsd

1 product

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Freebsd Freebsd	Version 5.0
Freebsd Freebsd	Version 5.5
Freebsd Freebsd	Version 6.0
Freebsd Freebsd	Version 6.1
Freebsd Freebsd	Version 6.2
Freebsd Freebsd	Version 7.0
Freebsd Freebsd	Version 7.0 pre-release

Related CWEs

References (10)

http://secunia.com/advisories/28498

Source: secteam@freebsd.org

http://security.FreeBSD.org/advisories/FreeBSD-SA-08:01.pty.asc

Source: secteam@freebsd.org

Patch

http://www.securityfocus.com/bid/27284

Source: secteam@freebsd.org

http://www.securitytracker.com/id?1019191

Source: secteam@freebsd.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/39665

Source: secteam@freebsd.org

http://secunia.com/advisories/28498

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.FreeBSD.org/advisories/FreeBSD-SA-08:01.pty.asc

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.securityfocus.com/bid/27284

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1019191

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/39665

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.