vulnwire
2.1low

CVE-2002-0701

ktrace in BSD-based operating systems allows the owner of a process with special privileges to trace the process after its privileges have…

Published 24 y ago · modified 4 mo ago · JSON

CVSS
2.1
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.3%
percentile 27%
Public exploits
0
none known

ktrace in BSD-based operating systems allows the owner of a process with special privileges to trace the process after its privileges have been lowered, which may allow the owner to obtain sensitive information that the process obtained while it was running with the extra privileges.

Exploit prediction (EPSS)

0.33% probability of exploitation in the next 30 days, higher than 27% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.02.1AV:L/AC:L/Au:N/C:P/I:N/A:N

References

  • marc.info /?l=bugtraq&m=102650797504351&w=2 · vendor-advisory, x_refsource_FREEBSD, x_transferred
  • securityfocus.com /bid/5133 · vdb-entry, x_refsource_BID, x_transferred
  • iss.net /security_center/static/9474.php · vdb-entry, x_refsource_XF, x_transferred
  • openbsd.org /errata.html#ktrace · vendor-advisory, x_refsource_OPENBSD, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.