SkipNavigation
Home | FAQ | Contact | Privacy Policy
US-CERT
American Flag
  Vulnerability
Notes
Database

Search Vulnerability Notes

Vulnerability Notes Help Information


 
 View Notes By
  Name

ID Number

CVE Name

Date Public

Date Published

Date Updated

Severity Metric
 Other Documents
  Technical Alerts

Technical Bulletins

Alerts

Security Tips

Vulnerability Note VU#809347

FreeBSD privilege elevation vulnerability

Overview

A locally exploitable privilege elevation vulnerability exists in FreeBSD.

I. Description

A locally exploitable privilege elevation vulnerability exists in FreeBSD. For more information, please see the Pine Internet Security Advisory.

II. Impact

A local user can gain root privileges.

III. Solution

Please see ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:23.stdio.asc for patch information.

Systems Affected
VendorStatusDate NotifiedDate Updated
FreeBSDVulnerable20-Aug-2002

References


ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:23.stdio.asc
http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0033.html
http://www.pine.nl/advisories/pine-cert-20020401.txt
http://www.iss.net/security_center/static/8920.php
http://www.securityfocus.com/bid/4568

Credit

The CERT/CC thanks PINE-CERT for discovering this vulnerability.

This document was written by Ian A. Finlay.

Other Information

Date Public:2002-04-22
Date First Published:2002-08-20
Date Last Updated:2002-08-20
CERT Advisory: 
CVE-ID(s):CVE-2002-0572
NVD-ID(s):CVE-2002-0572
US-CERT Technical Alerts: 
Metric:20.25
Document Revision:15

If you have feedback, comments, or additional information about this vulnerability, please send us email.
 

 
Page Corner Image
Copyright 2002 Carnegie Mellon University
Disclaimers and copyright information
Get Adobe Reader Get Adobe Reader