VULNERABILITY INTELLIGENCE
CVE-2008-0217
CVSS score6.9 MEDIUM
EPSS probability0.30%
CISA KEVNot currently listed
Published2008-01-16
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:C/I:C/A:C
Description
The script program in FreeBSD 5.0 through 7.0-PRERELEASE invokes openpty, which creates a pseudo-terminal with world-readable and world-writable permissions when it is not run as root, which allows local users to read data from the terminal of the user running script.