PT-2001-1590 · Freebsd · Freebsd

Published 2001-06-18 · Updated 2017-10-10 · CVE-2001-0371

Positive Technologies (AI Summary)

CVSS v2.0

6.2

Medium

Base vector

AV:L/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FreeBSD versions 4.2 and earlier

Description A race condition in the UFS and EXT2FS file systems makes deleted data available to user processes before it is zeroed out. This allows a local user to access otherwise restricted information.

Recommendations For versions 4.2 and earlier, update to a version that includes a fix for this issue to prevent unauthorized access to deleted data.

Fix

Related Identifiers

CVE-2001-0371

Affected Products

Freebsd

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2001-0371 · Security Note
• http://archives.neohapsis.com/archives/freebsd/2001-03/0403.html · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6268 · Note
• http://osvdb.org/5682 · Note