CVE

CVE-2001-1145

Severity:

Pending analysis

Type:

Unavailable / Other

Publication date:

17/08/2001

Last modified:

10/09/2008

Description

fts routines in FreeBSD 4.3 and earlier, NetBSD before 1.5.2, and OpenBSD 2.9 and earlier can be forced to change (chdir) into a different directory than intended when the directory above the current directory is moved, which could cause scripts to perform dangerous actions on the wrong directories.

Impact

Vector 2.0

AV:L/AC:H/Au:N/C:C/I:C/A:C CVSS v2.0 Severity and Metrics:

Base Score: 6.20 MEDIUM
Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C

Attack Vector (AV): Local
Attack Complexity (AC): High
Authentication (Au): None
Confidentiality (C): Complete
Integrity (I): Complete
Availability (A): Complete

Base Score 2.0

6.20

Severity 2.0

MEDIUM

Vulnerable products and versions

CPE	From	Up to
cpe:2.3:o:freebsd:freebsd:4.3:::::::*
cpe:2.3:o:netbsd:netbsd:1.5:::::::*
cpe:2.3:o:netbsd:netbsd:1.5.1:::::::*
cpe:2.3:o:openbsd:openbsd::::::::		2.9 (including)

To consult the complete list of CPE names with products and versions, see this page

CVE-2001-1145

Description

Impact

Vulnerable products and versions

References to Advisories, Solutions, and Tools