jail.c in jail in FreeBSD 8.0 and 8.1-PRERELEASE, when the “-l -U root” options are omitted, does not properly restrict access to the current working directory, which might allow local users to read, modify, or create arbitrary files via standard filesystem operations.
CPE | Name | Operator | Version |
---|---|---|---|
freebsd | eq | 8.0 | |
freebsd | eq | 8.1.0-prerelease |