Back to feed
EUVD-2009-4326 · Published Dec 20, 2009
freebsd-update in FreeBSD 8.0, 7.2, 7.1, 6.4, and 6.3 uses insecure permissions in its working directory (/var/db/freebsd-update by default), which allows local users to read copies of sensitive files after a (1) freebsd-update fetch (fetch) or (2) freebsd-update upgrade (upgrade) operation.
Technologies
Freebsd Freebsd
Weaknesses
CWE-264
CVSS scores
- v2.04.7
AV:L/AC:M/Au:N/C:C/I:N/A:N
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Privilege Escalation
References
Potentially impacted assets
See if this affects your attack surface
