PT-2001-1110 · Freebsd · Freebsd

Publicado 2001-03-12 · Atualizado 2008-09-10 · CVE-2000-0375

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions FreeBSD version 3.2

Description The issue allows local attackers to modify arbitrary files because the kernel follows symbolic links when creating core dump files.

Recommendations For FreeBSD version 3.2, consider restricting the creation of core dump files to a safe directory to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2000-0375

Produtos afetados

Freebsd

Referências · 2

• http://osvdb.org/6084 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2000-0375 · Nota de Segurança