CVE-2010-2022

Published: May 28, 2010Modified: Apr 29, 2026

3.3

Vector

AV:L/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 3.4 / Impact: 4.9

Source: NVD

Description

jail.c in jail in FreeBSD 8.0 and 8.1-PRERELEASE, when the "-l -U root" options are omitted, does not properly restrict access to the current working directory, which might allow local users to read, modify, or create arbitrary files via standard filesystem operations.

Affected (2)

Products: Freebsd: Freebsd

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Freebsd Freebsd	Version 8.0
Freebsd Freebsd	Version 8.1-prerelease

Related CWEs

References (8)

http://security.FreeBSD.org/advisories/FreeBSD-SA-10:04.jail.asc

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1024038

Source: cve@mitre.org

http://www.securityfocus.com/bid/40399

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2010/1247

Source: cve@mitre.org

PatchVendor Advisory

http://security.FreeBSD.org/advisories/FreeBSD-SA-10:04.jail.asc

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securitytracker.com/id?1024038

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/40399

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2010/1247

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.