CVEvulnerability
CVE-2010-2022
3.3 LOW
Official page ↗
- Status
- Modified
- Published
- 2010-05-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.3 LOW — AV:L/AC:M/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-264
Description
jail.c in jail in FreeBSD 8.0 and 8.1-PRERELEASE, when the "-l -U root" options are omitted, does not properly restrict access to the current working directory, which might allow local users to read, modify, or create arbitrary files via standard filesystem operations.
Affected configurations
• freebsd freebsd 8.0
• freebsd freebsd 8.1-prerelease
Related
Weakness · not in database (1)
References
- http://security.FreeBSD.org/advisories/FreeBSD-SA-10:04.jail.asc Vendor Advisory
- http://securitytracker.com/id?1024038 securitytracker.com
- http://www.securityfocus.com/bid/40399 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/1247 Patch, Vendor Advisory
- http://security.FreeBSD.org/advisories/FreeBSD-SA-10:04.jail.asc Vendor Advisory
- http://securitytracker.com/id?1024038 securitytracker.com
- http://www.securityfocus.com/bid/40399 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/1247 Patch, Vendor Advisory