{"id":"CVE-2002-0572","published":"2002-06-11T04:00:00Z","modified":"2024-08-08T02:56:37Z","title":"FreeBSD 4.5 and earlier, and possibly other BSD-based operating systems, allows local users to write to or read from…","vendor":null,"product":null,"tier":"tail","description":{"text":"FreeBSD 4.5 and earlier, and possibly other BSD-based operating systems, allows local users to write to or read from restricted files by closing the file descriptors 0 (standard input), 1 (standard output), or 2 (standard error), which may then be reused by a called setuid process that intended to perform I/O on normal files.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.01552,"percentile":0.75009,"provenance":"source"},"cwes":[],"references":[{"url":"http://www.iss.net/security_center/static/8920.php","tags":["vdb-entry","x_refsource_XF"]},{"url":"http://www.securityfocus.com/bid/4568","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://www.kb.cert.org/vuls/id/809347","tags":["third-party-advisory","x_refsource_CERT-VN"]},{"url":"http://www.osvdb.org/6095","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0033.html","tags":["mailing-list","x_refsource_VULNWATCH"]},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:23.stdio.asc","tags":["vendor-advisory","x_refsource_FREEBSD"]},{"url":"http://www.ciac.org/ciac/bulletins/m-072.shtml","tags":["third-party-advisory","government-resource","x_refsource_CIAC"]},{"url":"http://online.securityfocus.com/archive/1/268970","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"http://online.securityfocus.com/archive/1/269102","tags":["mailing-list","x_refsource_BUGTRAQ"]}],"priority":{"score":20.0,"factors":[{"name":"EPSS percentile","points":15.0},{"name":"Public exploit code","points":5.0}]},"exploitSources":{"exploitdb":{"count":1,"earliest":"2002-04-23"},"first":{"date":"2002-04-23","source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/21407"},"provenance":"source"},"euvd":{"id":"EUVD-2002-0567","exploited":false,"provenance":"source"},"exploits":[{"id":21407,"url":"https://www.exploit-db.com/exploits/21407","title":"Apple Mac OSX 10.x / FreeBSD 4.x / OpenBSD 2.x / Solaris 2.5/2.6/7.0/8 - 'exec C Library' Standard I/O File Descriptor Closure","date":"2002-04-23","verified":true,"provenance":"source"}],"lineage":{"familyId":"fam-cve-2002-0572-family-cve-2002-0572","children":[{"from":"CVE-2002-0572","to":"CVE-2007-0392","relation":"variant","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"variant","quote":"IBM AIX 5.3 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges by closing file descriptor 0, 1, or 2 and then invoking a setuid program, a variant of CVE-2002-0572.","from":"CVE.org","in":"CVE-2007-0392"}]},{"from":"CVE-2002-0572","to":"CVE-2007-0393","relation":"variant","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"variant","quote":"Sun Solaris 9 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges by closing file descriptor 0, 1, or 2 and then invoking a setuid program, a variant of CVE-2002-0572.","from":"CVE.org","in":"CVE-2007-0393"}]},{"from":"CVE-2002-0572","to":"CVE-2007-0394","relation":"variant","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"variant","quote":"…P-UX B11.11 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges by closing file descriptor 0, 1, or 2 and then invoking a setuid program, a variant of CVE-2002-0572.","from":"CVE.org","in":"CVE-2007-0394"}]}]}}