NetSight
IP …
high7.2Public exploit code

CVE-2002-0572

FreeBSD 4.5 and earlier, and possibly other BSD-based operating systems, allows local users to write to or read from restricted files by closing the file descr…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

FreeBSD 4.5 and earlier, and possibly other BSD-based operating systems, allows local users to write to or read from restricted files by closing the file descriptors 0 (standard input), 1 (standard output), or 2 (standard error), which may then be reused by a called setuid process that intended to perform I/O on normal files.

Affected products

VendorProductAffected versions
FreebsdFreebsd
Versions 4.4, 4.5
OpenbsdOpenbsd
Versions 2.0, 2.1, 2.2, 2.3
SunSolaris
Versions 2.5.1, 2.6, 7.0, 8.0
SunSunos
All versions
Versions 5.5.1, 5.7, 5.8

References