libutil in OpenSSH on FreeBSD 4.4 and earlier does not drop privileges before verifying the capabilities for reading the copyright and welcome files, which allows local users to bypass the capabilities checks and read arbitrary files by specifying alternate copyright or welcome files.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Openbsd Openssh | — | Upgrade to the latest version of OpenSSH | Dec 5, 2012 | Sep 20, 2001 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub