Unscored CVE-2008-0216 EUVD-2008-0228GHSA-3rm8-fj97-4hq7

The ptsname function in FreeBSD 6.0 through 7.0-PRERELEASE does not properly verify that a certain portion of a device name is associated w…

Published Jan 16, 2008 · Updated Aug 7, 2024 · Assigned by freebsd

Description

The ptsname function in FreeBSD 6.0 through 7.0-PRERELEASE does not properly verify that a certain portion of a device name is associated with a pty of a user who is calling the pt_chown function, which might allow local users to read data from the pty from another user.

References

28498 third-party-advisory
1019191 vdb-entry
freebsd-ptsname-information-disclosure(39667) vdb-entry
27284 vdb-entry
FreeBSD-SA-08:01 vendor-advisory