PT-2001-1110 · Freebsd · Freebsd
Published
2001-03-12
·
Updated
2008-09-10
·
CVE-2000-0375
CVSS v2.0
2.1
Low
| Vector | AV:L/AC:L/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
FreeBSD version 3.2
Description
The issue allows local attackers to modify arbitrary files because the kernel follows symbolic links when creating core dump files.
Recommendations
For FreeBSD version 3.2, consider restricting the creation of core dump files to a safe directory to minimize the risk of exploitation.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Freebsd