Description
jail.c in jail in FreeBSD 8.0 and 8.1-PRERELEASE, when the "-l -U root" options are omitted, does not properly restrict access to the current working directory, which might allow local users to read, modify, or create arbitrary files via standard filesystem operations.
References
- ADV-2010-1247 vdb-entry
- FreeBSD-SA-10:04 vendor-advisory
- 40399 vdb-entry
- 1024038 vdb-entry