Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
periodic in FreeBSD 4.1.1 and earlier, and possibly other operating systems, allows local users to overwrite arbitrary files via a symlink attack.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
FreeBSD periodic 临时文件竞争环境错误
Vulnerability Description
CVE(CAN) ID: CVE-2000-0890 FreeBSD是一种自由获取、源码开发的BSD-UNIX操作系统,由BSD Project负责维护发 放。Periodic是最近新出的一个定时执行软件包。 当cron执行时,根据crontab文件中的定时序列调用periodic去执行命令,然而中途 产生的临时文件位于/tmp目录下,而且可以通过穷举手段猜测即将使用的临时文件名。 恶意的本地用户可以通过提前建立同名符号连接的方式损害那些本来只允许root用户 写入的文件。 <* 来源:David Lar
CVSS Information
N/A
Vulnerability Type
N/A