PT-2001-1425 · Freebsd · Freebsd

Published 2001-05-03 · Updated 2017-10-10 · CVE-2001-0196

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: FreeBSD versions 4.x and earlier

Description: The issue concerns the inetd ident server in FreeBSD, which does not properly set group permissions. This allows remote attackers to read the first 16 bytes of files that are accessible by the wheel group.

Recommendations: For versions 4.x and earlier, update to a version that properly sets group permissions for the inetd ident server, or consider disabling the ident server as a temporary workaround to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2001-0196

Affected Products

Freebsd

References · 5

• http://securityfocus.com/bid/2324 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-0196 · Security Note
• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:11.inetd.v1.1.asc · Vendor Advisory
• http://osvdb.org/1753 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6052 · Note