CVE-2010-2022 - CERT CVE
ID CVE-2010-2022
Sažetak jail.c in jail in FreeBSD 8.0 and 8.1-PRERELEASE, when the "-l -U root" options are omitted, does not properly restrict access to the current working directory, which might allow local users to read, modify, or create arbitrary files via standard filesystem operations.
Reference
CVSS
Base: 3.3
Impact: 4.9
Exploitability:3.4
Pristup
VektorSloženostAutentikacija
LOCAL MEDIUM NONE
Impact
PovjerljivostCjelovitostDostupnost
PARTIAL PARTIAL NONE
CVSS vektor AV:L/AC:M/Au:N/C:P/I:P/A:N
Zadnje važnije ažuriranje 01-06-2010 - 04:00
Objavljeno 28-05-2010 - 18:30