CVE-2001-1029
N/A
N/A
Summary
libutil in OpenSSH on FreeBSD 4.4 and earlier does not drop privileges before verifying the capabilities for reading the copyright and welcome files, which allows local users to bypass the capabilities checks and read arbitrary files by specifying alternate copyright or welcome files.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://archives.neohapsis.com/archives/bugtraq/2001-09/0173.html
- http://www.osvdb.org/6073
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8697
References
- http://archives.neohapsis.com/archives/bugtraq/2001-09/0173.html
- http://www.osvdb.org/6073
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8697
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.