VULNERABILITY INTELLIGENCE

CVE-2001-1145

CVSS score6.2 MEDIUM
EPSS probability0.30%
CISA KEVNot currently listed
Published2001-08-17
Last modified2026-06-16
CVSS vectorAV:L/AC:H/Au:N/C:C/I:C/A:C

Description

fts routines in FreeBSD 4.3 and earlier, NetBSD before 1.5.2, and OpenBSD 2.9 and earlier can be forced to change (chdir) into a different directory than intended when the directory above the current directory is moved, which could cause scripts to perform dangerous actions on the wrong directories.

Primary references