Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4.7
CVSSv2

CVE-2009-4358

Published: 20/12/2009 Updated: 21/12/2009
CVSS v2 Base Score: 4.7 | Impact Score: 6.9 | Exploitability Score: 3.4
VMScore: 418
Vector: AV:L/AC:M/Au:N/C:C/I:N/A:N
Subscribe to Freebsd

Vulnerability Summary

freebsd-update in FreeBSD 8.0, 7.2, 7.1, 6.4, and 6.3 uses insecure permissions in its working directory (/var/db/freebsd-update by default), which allows local users to read copies of sensitive files after a (1) freebsd-update fetch (fetch) or (2) freebsd-update upgrade (upgrade) operation.

Vulnerable Product Search on Vulmon Subscribe to Product

freebsd freebsd 8.0

freebsd freebsd 7.2

freebsd freebsd 7.1

freebsd freebsd 6.4

freebsd freebsd 6.3

References

CWE-264http://secunia.com/advisories/37575http://www.securityfocus.com/bid/37190http://security.freebsd.org/advisories/FreeBSD-SA-09:17.freebsd-update.aschttps://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322CVE-2006-4304wirelessCVE-2023-23022local file inclusionCVE-2024-27058CVE-2024-33820open redirectCVE-2024-27079
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook