CVE-2008-0216

NameCVE-2008-0216
DescriptionThe ptsname function in FreeBSD 6.0 through 7.0-PRERELEASE does not properly verify that a certain portion of a device name is associated with a pty of a user who is calling the pt_chown function, which might allow local users to read data from the pty from another user.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
kfreebsd-5source(unstable)(not affected)
kfreebsd-6source(unstable)(not affected)
kfreebsd-7source(unstable)(not affected)

Notes

- kfreebsd-5 <not-affected> (see bug #483152)
- kfreebsd-6 <not-affected> (see bug #483152)
- kfreebsd-7 <not-affected> (see bug #483152)

Search for package or bug name: Reporting problems