VULNERABILITY INTELLIGENCE

CVE-2008-0777

CVSS score4.9 MEDIUM
EPSS probability0.41%
CISA KEVNot currently listed
Published2008-02-15
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:N/A:N

Description

The sendfile system call in FreeBSD 5.5 through 7.0 does not check the access flags of the file descriptor used for sending a file, which allows local users to read the contents of write-only files.

Primary references