Vulnerabilities > CVE-2002-0820 - Local Security vulnerability in Freebsd 4.6

047910
CVSS 7.2 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
local
low complexity
freebsd
NVD
Published: 2002-08-12
Updated: 2016-10-18

Summary

FreeBSD kernel 4.6 and earlier closes the file descriptors 0, 1, and 2 after they have already been assigned to /dev/null when the descriptors reference procfs or linprocfs, which could allow local users to reuse the file descriptors in a setuid or setgid program to modify critical data and gain privileges.

Vulnerable Configurations

Part Description Count
OS
Freebsd
1

References