PT-2001-1590 · Freebsd · Freebsd

Publicado 2001-06-18 · Atualizado 2017-10-10 · CVE-2001-0371

Positive Technologies (AI Summary)

CVSS v2.0

6.2

Média

Vetor base

AV:L/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FreeBSD versions 4.2 and earlier

Description A race condition in the UFS and EXT2FS file systems makes deleted data available to user processes before it is zeroed out. This allows a local user to access otherwise restricted information.

Recommendations For versions 4.2 and earlier, update to a version that includes a fix for this issue to prevent unauthorized access to deleted data.

Correção

Identificadores relacionados

CVE-2001-0371

Produtos afetados

Freebsd

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2001-0371 · Nota de Segurança
• http://archives.neohapsis.com/archives/freebsd/2001-03/0403.html · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6268 · Nota
• http://osvdb.org/5682 · Nota