Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
6.9
CVSSv2

CVE-2002-0824

Published: 12/08/2002 Updated: 11/03/2021
CVSS v2 Base Score: 6.9 | Impact Score: 10 | Exploitability Score: 3.4
VMScore: 695
Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C
Subscribe to Freebsd

Vulnerability Summary

BSD pppd allows local users to change the permissions of arbitrary files via a symlink attack on a file that is specified as a tty device.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

freebsd point-to-point protocol daemon -

Exploits

Exploit DB: FreeBSD 4.x / NetBSD 1.4.x/1.5.x/1.6 / OpenBSD 3 - pppd Arbitrary File Permission Modification Race Condition
source: wwwsecurityfocuscom/bid/5355/info A vulnerability has been reported in some versions of the pppd daemon included with multiple BSD distributions A race condition error in the code may result in the pppd process changing the file permissions on an arbitrary system file pppd will generally run as a privileged user This issue ha ...

References

CWE-59ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-010.txt.aschttp://www.openbsd.org/errata31.htmlhttp://www.iss.net/security_center/static/9738.phphttp://www.securityfocus.com/bid/5355http://marc.info/?l=bugtraq&m=102812546815606&w=2https://nvd.nist.govhttps://www.exploit-db.com/exploits/21669/
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48700CVE-2022-48689CVE-2024-27956CVE-2023-6363SQLNULL pointer dereferenceCVE-2023-41830CVE-2015-2051arbitrary
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook