CVE-2008-0217

Publication date

2008-01-16 01:00:00

Family

freebsd

State

PUBLISHED

Description

The script program in FreeBSD 5.0 through 7.0-PRERELEASE invokes openpty, which creates a pseudo-terminal with world-readable and world-writable permissions when it is not run as root, which allows local users to read data from the terminal of the user running script.