5.0med
CVE-2001-0196
inetd ident server in FreeBSD 4.x and earlier does not properly set group permissions, which allows remote attackers to read the first 16 b…
Published 25 y ago · modified 4 mo ago · JSON
CVSS
5.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
1.5%
percentile 75%
Public exploits
0
none known
Summary
inetd ident server in FreeBSD 4.x and earlier does not properly set group permissions, which allows remote attackers to read the first 16 bytes of files that are accessible by the wheel group.
Exploit prediction (EPSS)
1.54% probability of exploitation in the next 30 days, higher than 75% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:P/I:N/A:N |
References
- exchange.xforce.ibmcloud.com /vulnerabilities/6052 · vdb-entry, x_refsource_XF, x_transferred
- osvdb.org /1753 · vdb-entry, x_refsource_OSVDB, x_transferred
- securityfocus.com /bid/2324 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2001-0196
- NVD: CVE-2001-0196
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.