Unscored CVE-2008-0217 EUVD-2008-0229GHSA-cw47-m83w-8xg4

The script program in FreeBSD 5.0 through 7.0-PRERELEASE invokes openpty, which creates a pseudo-terminal with world-readable and world-wri…

Published Jan 16, 2008 · Updated Aug 7, 2024 · Assigned by freebsd

Description

The script program in FreeBSD 5.0 through 7.0-PRERELEASE invokes openpty, which creates a pseudo-terminal with world-readable and world-writable permissions when it is not run as root, which allows local users to read data from the terminal of the user running script.

References

28498 third-party-advisory
1019191 vdb-entry
freebsd-openpty-information-disclosure(39665) vdb-entry
27284 vdb-entry
FreeBSD-SA-08:01 vendor-advisory