CVE

Id
4963  
CVE No.
CVE-2002-0572  
Status
Candidate  
Description
FreeBSD 4.5 and earlier, and possibly other BSD-based operating systems, allows local users to write to or read from restricted files by closing the file descriptors 0 (standard input), 1 (standard output), or 2 (standard error), which may then be reused by a called setuid process that intended to perform I/O on normal files.  
Phase
Modified (20051217)  
Votes
ACCEPT(2) Baker, Cole | MODIFY(1) Frech | NOOP(4) Christey, Cox, Foat, Wall  
Comments
Frech> XF:bsd-suid-apps-gain-privileges(8920) | Christey> BSA? Nope. BSD. | Take a closer look at XF:bsd-suid-apps-gain-privileges(8920), | which also references CVE-2002-0820. | Christey> Other OSes besides FreeBSD are affected. | | HP:SSRT0845U | URL:http://marc.theaimsgroup.com/?l=bugtraq&m=104800750626108&w=2 | Need to more closely examine the relationship between | CVE-2002-0820 and CVE-2002-0572, especially with respect to | references. | Christey> CERT-VN:VU#809347 | URL:http://www.kb.cert.org/vuls/id/809347 | HP:SSRT0845U | URL:http://marc.theaimsgroup.com/?l=bugtraq&m=104800750626108&w=2  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
25571 4963 CVE-2002-0572 BUGTRAQ:20020423 cheers  View
25572 4963 CVE-2002-0572 URL:http://online.securityfocus.com/archive/1/269102  View
25573 4963 CVE-2002-0572 BUGTRAQ:20020422 Pine Internet Advisory: Setuid application execution may give local root in FreeBSD  View
25574 4963 CVE-2002-0572 URL:http://online.securityfocus.com/archive/1/268970  View
25575 4963 CVE-2002-0572 VULNWATCH:20020422 Pine Internet Advisory: Setuid application execution may give local root in FreeBSD  View
25576 4963 CVE-2002-0572 URL:http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0033.html  View
25577 4963 CVE-2002-0572 FREEBSD:FreeBSD-SA-02:23  View
25578 4963 CVE-2002-0572 URL:ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:23.stdio.asc  View
25579 4963 CVE-2002-0572 CERT-VN:VU#809347  View
25580 4963 CVE-2002-0572 URL:http://www.kb.cert.org/vuls/id/809347  View
25581 4963 CVE-2002-0572 CIAC:M-072  View
25582 4963 CVE-2002-0572 URL:http://www.ciac.org/ciac/bulletins/m-072.shtml  View
25583 4963 CVE-2002-0572 BID:4568  View
25584 4963 CVE-2002-0572 URL:http://www.securityfocus.com/bid/4568  View
25585 4963 CVE-2002-0572 OSVDB:6095  View
25586 4963 CVE-2002-0572 URL:http://www.osvdb.org/6095  View
25587 4963 CVE-2002-0572 XF:bsd-suid-apps-gain-privileges(8920)  View

Related JVN