CVE-2001-1029

libutil in OpenSSH on FreeBSD 4.4 and earlier does not drop privileges before verifying the capabilities for reading the copyright and welcome files, which allows local users to bypass the capabilities checks and read arbitrary files by specifying alternate copyright or welcome files.

CVSS v2.0

2.1 LOWAV:L/AC:L/Au:N/C:P/I:N/A:N

EPSS

1.37% chance of exploitation in the next 30 days, 70th percentile

Published

2004-09-01

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/21114

References

• CVE Record
• NVD entry

Related

• CVE-2001-1022
• CVE-2001-1036
• CVE-2001-1021
• CVE-2001-1044
• CVE-2001-1015
• CVE-2001-1045