Description
fts routines in FreeBSD 4.3 and earlier, NetBSD before 1.5.2, and OpenBSD 2.9 and earlier can be forced to change (chdir) into a different directory than intended when the directory above the current directory is moved, which could cause scripts to perform dangerous actions on the wrong directories.
References
- 5466 vdb-entry
- 3205 vdb-entry
- 20010530 029: SECURITY FIX: May 30, 2001 vendor-advisory
- NetBSD-SA2001-016 vendor-advisory
- bsd-fts-race-condition(8715) vdb-entry