The script program in FreeBSD 5.0 through 7.0-PRERELEASE invokes openpty, which creates a pseudo-terminal with world-readable and world-writable permissions when it is not run as root, which allows local users to read data from the terminal of the user running script.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Freebsd | Freebsd | 5.0 (including) | 5.0 (including) |
| Freebsd | Freebsd | 5.5 (including) | 5.5 (including) |
| Freebsd | Freebsd | 6.0 (including) | 6.0 (including) |
| Freebsd | Freebsd | 6.1 (including) | 6.1 (including) |
| Freebsd | Freebsd | 6.2 (including) | 6.2 (including) |
| Freebsd | Freebsd | 7.0 (including) | 7.0 (including) |
| Freebsd | Freebsd | 7.0-pre-release (including) | 7.0-pre-release (including) |
| Kfreebsd-5 | Ubuntu | dapper | * |
| Kfreebsd-5 | Ubuntu | edgy | * |
| Kfreebsd-5 | Ubuntu | feisty | * |
| Kfreebsd-5 | Ubuntu | gutsy | * |
| Kfreebsd-5 | Ubuntu | hardy | * |
| Kfreebsd-5 | Ubuntu | intrepid | * |
References
- http://secunia.com/advisories/28498
- http://security.FreeBSD.org/advisories/FreeBSD-SA-08:01.pty.asc
- http://www.securityfocus.com/bid/27284
- http://www.securitytracker.com/id?1019191
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39665
- http://secunia.com/advisories/28498
- http://security.FreeBSD.org/advisories/FreeBSD-SA-08:01.pty.asc
- http://www.securityfocus.com/bid/27284
- http://www.securitytracker.com/id?1019191
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39665