VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 16, 2008· Updated Jun 16, 2026

CVE-2008-0217

CVE-2008-0217

Description

The script program in FreeBSD 5.0 through 7.0-PRERELEASE invokes openpty, which creates a pseudo-terminal with world-readable and world-writable permissions when it is not run as root, which allows local users to read data from the terminal of the user running script.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • FreeBSD/FreeBSD8 versions
    cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:5.5:*:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:6.0:*:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:6.1:*:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:6.2:*:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:7.0:*:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:7.0:pre-release:*:*:*:*:*:*
    • (no CPE)range: 5.0 - 7.0-PRERELEASE

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.