medium6.9Public exploit code
CVE-2002-0824
BSD pppd allows local users to change the permissions of arbitrary files via a symlink attack on a file that is specified as a tty device.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- FreeBSD 4.x / NetBSD 1.4.x/1.5.x/1.6 / OpenBSD 3 - pppd Arbitrary File Permission Modification Race Condition2002-07-29 · local · bsd · Verified
Impact
BSD pppd allows local users to change the permissions of arbitrary files via a symlink attack on a file that is specified as a tty device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Freebsd | Point-To-Point Protocol Daemon | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=102812546815606&w=2
- http://www.iss.net/security_center/static/9738.php
- http://www.openbsd.org/errata31.html
- http://www.securityfocus.com/bid/5355
- http://marc.info/?l=bugtraq&m=102812546815606&w=2
- http://www.iss.net/security_center/static/9738.php
- http://www.openbsd.org/errata31.html
- http://www.securityfocus.com/bid/5355