1. Home
  2. CVE Database
  3. CVE-2001-1029
LOW · 2.1

CVE-2001-1029

libutil in OpenSSH on FreeBSD 4.4 and earlier does not drop privileges before verifying the capabilities for reading the copyright and welcome files, which allows local users to bypass the capabilitie...

Vulnerability Description

libutil in OpenSSH on FreeBSD 4.4 and earlier does not drop privileges before verifying the capabilities for reading the copyright and welcome files, which allows local users to bypass the capabilities checks and read arbitrary files by specifying alternate copyright or welcome files.

CVSS Score

2.1

LOW

AV:L/AC:L/Au:N/C:P/I:N/A:N
Confidentiality
PARTIAL
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
OpenbsdOpenssh4.5
FreebsdFreebsd<= 4.4

References

FAQ

What is CVE-2001-1029?

CVE-2001-1029 is a vulnerability with a CVSS score of 2.1 (LOW). libutil in OpenSSH on FreeBSD 4.4 and earlier does not drop privileges before verifying the capabilities for reading the copyright and welcome files, which allows local users to bypass the capabilitie...

How severe is CVE-2001-1029?

CVE-2001-1029 has been rated LOW with a CVSS base score of 2.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2001-1029?

Check the references section above for vendor advisories and patch information. Affected products include: Openbsd Openssh, Freebsd Freebsd.