Unscored CVE-2008-0777 EUVD-2008-0787GHSA-5xcv-g3q8-q748

The sendfile system call in FreeBSD 5.5 through 7.0 does not check the access flags of the file descriptor used for sending a file, which a…

Published Feb 15, 2008 · Updated Sep 16, 2024 · Assigned by mitre

Description

The sendfile system call in FreeBSD 5.5 through 7.0 does not check the access flags of the file descriptor used for sending a file, which allows local users to read the contents of write-only files.

References

FreeBSD-SA-08:03 vendor-advisory
1019416 vdb-entry
27789 vdb-entry
28928 third-party-advisory