The catopen function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental variable.
References
Link | Resource |
---|---|
ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:53.catopen.asc | Patch Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2000-11-29T05:00:00
Updated: 2003-05-08T09:00:00
Reserved: 2000-11-24T00:00:00
Link: CVE-2000-1012
JSON object: View
NVD Information
Status : Analyzed
Published: 2000-12-11T05:00:00.000
Modified: 2008-09-05T20:22:25.950
Link: CVE-2000-1012
JSON object: View
Redhat Information
No data.
CWE