low2.1Public exploit code
CVE-2001-1029
libutil in OpenSSH on FreeBSD 4.4 and earlier does not drop privileges before verifying the capabilities for reading the copyright and welcome files, which all…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- FreeBSD 4.3/4.4 - Login Capabilities Privileged File Reading2001-09-17 · local · freebsd · Verified
Impact
libutil in OpenSSH on FreeBSD 4.4 and earlier does not drop privileges before verifying the capabilities for reading the copyright and welcome files, which allows local users to bypass the capabilities checks and read arbitrary files by specifying alternate copyright or welcome files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openbsd | Openssh | Version 4.5 |
| Freebsd | Freebsd | through 4.4 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2001-09/0173.html
- http://www.osvdb.org/6073
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8697
- http://archives.neohapsis.com/archives/bugtraq/2001-09/0173.html
- http://www.osvdb.org/6073
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8697