CVE-2008-0216

2008-01-1602:00:00

CWE-264

[email protected]

web.nvd.nist.gov

cve-2008-0216

ptsname function

freebsd

data security

local user access

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

The ptsname function in FreeBSD 6.0 through 7.0-PRERELEASE does not properly verify that a certain portion of a device name is associated with a pty of a user who is calling the pt_chown function, which might allow local users to read data from the pty from another user.

Affected configurations

NVD

Node

freebsdfreebsdMatch6.0

freebsdfreebsdMatch6.0release

freebsdfreebsdMatch6.0stable

freebsdfreebsdMatch6.1

freebsdfreebsdMatch6.1release

freebsdfreebsdMatch6.1release_p10

freebsdfreebsdMatch6.1stable

freebsdfreebsdMatch6.2

freebsdfreebsdMatch6.2stable

freebsdfreebsdMatch6.3

freebsdfreebsdMatch7.0

freebsdfreebsdMatch7.0current

freebsdfreebsdMatch7.0pre-release

CPENameOperatorVersion
freebsd:freebsdfreebsdeq6.0
freebsd:freebsdfreebsdeq6.1
freebsd:freebsdfreebsdeq6.2
freebsd:freebsdfreebsdeq6.3
freebsd:freebsdfreebsdeq7.0