CVE-2008-0216

The ptsname function in FreeBSD 6.0 through 7.0-PRERELEASE does not properly verify that a certain portion of a device name is associated with a pty of a user…

published January 16, 2008

CVSS
—
EPSS
0%
Percentile
23.0
In the wild
Unconfirmed
What it is

The ptsname function in FreeBSD 6.0 through 7.0-PRERELEASE does not properly verify that a certain portion of a device name is associated with a pty of a user who is calling the pt_chown function, which might allow local users to read data from the pty from another user.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00313 · 23.0th percentile
Published
2008-01-16T01:00Z
EPSS history
Timeline
  • 16 JAN 01:00Z
    The ptsname function in FreeBSD 6.0 through 7.0-PRERELEASE does not properly verify that a certain portion of a device name is associated with a pty of a user…
    cvelistv5