pkg_add in FreeBSD 4.2 up to and including 4.4 creates a temporary directory with world-searchable permissions, which may allow local users to modify world-writable parts of the package during installation.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
freebsd freebsd 4.4 |
||
freebsd freebsd 4.2 |
||
freebsd freebsd 4.3 |