CVE Vulnerabilities

CVE-2002-1669

Published: Dec 31, 2002 | Modified: Nov 20, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
2.1 LOW
AV:L/AC:L/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

pkg_add in FreeBSD 4.2 through 4.4 creates a temporary directory with world-searchable permissions, which may allow local users to modify world-writable parts of the package during installation.

Affected Software

Name Vendor Start Version End Version
Freebsd Freebsd 4.2 (including) 4.2 (including)
Freebsd Freebsd 4.3 (including) 4.3 (including)
Freebsd Freebsd 4.4 (including) 4.4 (including)

References