CVE-2008-0216

The ptsname function in FreeBSD 6.0 through 7.0-PRERELEASE does not properly verify that a certain portion of a device name is associated with a pty of a user who is calling the pt_chown function, which might allow local users to read data from the pty from another user.

Link	Resource
http://security.FreeBSD.org/advisories/FreeBSD-SA-08:01.pty.asc	Patch
http://www.securityfocus.com/bid/27284
http://www.securitytracker.com/id?1019191
http://secunia.com/advisories/28498
https://exchange.xforce.ibmcloud.com/vulnerabilities/39667

Configuration 1

cpe:2.3:o:freebsd:freebsd:7.0:pre-release:*:*:*:*:*:* cpe:2.3:o:freebsd:freebsd:6.1:*:*:*:*:*:*:* cpe:2.3:o:freebsd:freebsd:6.3:*:*:*:*:*:*:* cpe:2.3:o:freebsd:freebsd:6.1:stable:*:*:*:*:*:* cpe:2.3:o:freebsd:freebsd:6.1:release:*:*:*:*:*:* cpe:2.3:o:freebsd:freebsd:7.0:*:*:*:*:*:*:* cpe:2.3:o:freebsd:freebsd:6.1:release_p10:*:*:*:*:*:* cpe:2.3:o:freebsd:freebsd:6.0:*:*:*:*:*:*:* cpe:2.3:o:freebsd:freebsd:6.2:stable:*:*:*:*:*:* cpe:2.3:o:freebsd:freebsd:6.2:*:*:*:*:*:*:* cpe:2.3:o:freebsd:freebsd:6.0:release:*:*:*:*:*:* cpe:2.3:o:freebsd:freebsd:7.0:current:*:*:*:*:*:* cpe:2.3:o:freebsd:freebsd:6.0:stable:*:*:*:*:*:*

---

Published : 2008-01-16 02:00

Updated : 2017-08-08 01:29

---

NVD link : CVE-2008-0216

Mitre link : CVE-2008-0216

No products.

CWE-264