Back to Database
Status published
High
CVE-2002-0820
FreeBSD kernel 4.6 and earlier closes the file descriptors 0,...
Vulnerability Description
FreeBSD kernel 4.6 and earlier closes the file descriptors 0, 1, and 2 after they have already been assigned to /dev/null when the descriptors reference procfs or linprocfs, which could allow local users to reuse the file descriptors in a setuid or setgid program to modify critical data and gain privileges.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2002-0820
Credits & Attribution
No credits recorded in the NVD database.
References
- http://groups.google.com/groups?hl=en&lr=&ie=UTF-8&oe=UTF-8&frame=right&th=d429cd2ef1d3a2b7&seekm=ai6c0q%242289%241%40FreeBSD.csie.NCTU.edu.tw#link16
- ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:23.stdio.asc
- http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0047.html
- http://marc.info/?l=bugtraq&m=102979180524452&w=2
More from freebsd
View All →CVE-2022-32264
sys/netinet/tcp_timer.h in FreeBSD before 7.0 contains a denial-of-service (DoS) vulnerability...
Unknown
0
CVE-2021-36159
libfetch before 2021-07-26, as used in apk-tools, xbps, and other...
Critical
9.1
CVE-2020-24718
bhyve, as used in FreeBSD through 12.1 and illumos (e.g.,...
High
8.2
CVE-2020-10566
grub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12,...
High
7.8
CVE-2020-10565
grub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12,...
High
7.8
Affected Vendor
freebsd
View all reports →Affected Software
freebsd
Vulnerable Versions:
4.6
Timeline
Official Publish:
August 2nd, 2002
Last Modified:
August 8th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.