Skip to content
OpenAdvisories
Unscored CVE-2010-2022 EUVD-2010-2042GHSA-v2wv-8qgp-cpv7

jail.c in jail in FreeBSD 8.0 and 8.1-PRERELEASE, when the "-l -U root" options are omitted, does not properly restrict access to the curre…

Published May 28, 2010 · Updated Sep 17, 2024 · Assigned by mitre

Description

jail.c in jail in FreeBSD 8.0 and 8.1-PRERELEASE, when the "-l -U root" options are omitted, does not properly restrict access to the current working directory, which might allow local users to read, modify, or create arbitrary files via standard filesystem operations.

References