CVEvulnerability
CVE-2001-0196
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2001-05-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Description
inetd ident server in FreeBSD 4.x and earlier does not properly set group permissions, which allows remote attackers to read the first 16 bytes of files that are accessible by the wheel group.
Affected configurations
• freebsd freebsd 3.5
• freebsd freebsd 3.5.1
• freebsd freebsd 4.1.1
• freebsd freebsd 4.2
References
- ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:11.inetd.v1.1.asc ftp.freebsd.org
- http://www.osvdb.org/1753 www.osvdb.org
- http://www.securityfocus.com/bid/2324 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6052 exchange.xforce.ibmcloud.com
- ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:11.inetd.v1.1.asc ftp.freebsd.org
- http://www.osvdb.org/1753 www.osvdb.org
- http://www.securityfocus.com/bid/2324 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6052 exchange.xforce.ibmcloud.com