NVD

Id
201  
Name
CVE-2008-0216  
Description
The ptsname function in FreeBSD 6.0 through 7.0-PRERELEASE does not properly verify that a certain portion of a device name is associated with a pty of a user who is calling the pt_chown function, which might allow local users to read data from the pty from another user.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2008-01-15  
Modified Date
2008-09-05  
Seq
2008-0216  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
1497 201 CVE-2008-0216 FreeBSD-SA-08:01  View
1498 201 CVE-2008-0216 27284  View
1499 201 CVE-2008-0216 1019191  View
1500 201 CVE-2008-0216 freebsd-ptsname-information-disclosure(39667)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47275 JVNDB-2008-002585 FreeBSD の ptsname 関数における他のユーザから pty からのデータを読まれる脆弱性 FreeBSD の ptsname 関数には、pt_chown 関数を呼び出すユーザの pty に関連付けされているデバイス名の特定部分を適切に確認しないため、他のユーザから pty からのデータを読まれる脆弱性が存在します。 CVE-2008-0216 30329 CVE-2008-0216 201 2.1 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002585.html 2008-01-14 2012-06-26 View