PT-2001-1425 · Freebsd · Freebsd

Publicado 2001-05-03 · Atualizado 2017-10-10 · CVE-2001-0196

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: FreeBSD versions 4.x and earlier

Description: The issue concerns the inetd ident server in FreeBSD, which does not properly set group permissions. This allows remote attackers to read the first 16 bytes of files that are accessible by the wheel group.

Recommendations: For versions 4.x and earlier, update to a version that properly sets group permissions for the inetd ident server, or consider disabling the ident server as a temporary workaround to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2001-0196

Produtos afetados

Freebsd

Referências · 5

• http://osvdb.org/1753 · Nota
• http://securityfocus.com/bid/2324 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2001-0196 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6052 · Nota
• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:11.inetd.v1.1.asc · Aviso do Fabricante