PT-2001-2166 · Freebsd · Freebsd

Publicado 2001-09-04 · Atualizado 2017-10-10 · CVE-2001-1017

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FreeBSD versions 4.2 through 4.3

Description The issue allows local users to potentially gain privileges by reading a copied file while it is being updated. This could enable them to obtain password hashes and crack the passwords.

Recommendations For versions 4.2 through 4.3, update the rmuser utility to ensure it does not create world-readable copies of the master.passwd file. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2001-1017

Produtos afetados

Freebsd

Referências · 5

• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:59.rmuser.v1.1.asc · Aviso do Fabricante
• http://osvdb.org/1947 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-1017 · Nota de Segurança
• http://securityfocus.com/bid/3282 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7086 · Nota