CVE Vulnerabilities

CVE-2008-0777

Published: Feb 15, 2008 | Modified: Sep 05, 2008
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.9 MEDIUM
AV:L/AC:L/Au:N/C:C/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

The sendfile system call in FreeBSD 5.5 through 7.0 does not check the access flags of the file descriptor used for sending a file, which allows local users to read the contents of write-only files.

Affected Software

Name Vendor Start Version End Version
Freebsd Freebsd 6.3 6.3
Freebsd Freebsd 5.5 5.5
Freebsd Freebsd 7.0 7.0
Freebsd Freebsd 6.2 6.2

References