Security Advisory

CVE-2008-0217

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2008-01-16 01:00:00

Last updated 2024-08-07 07:39:34

Assigner freebsd

State PUBLISHED

Description

The script program in FreeBSD 5.0 through 7.0-PRERELEASE invokes openpty, which creates a pseudo-terminal with world-readable and world-writable permissions when it is not run as root, which allows local users to read data from the terminal of the user running script.

← Browse all CVEs View on cve.org ↗