Directory Traversal Vulnerability in BSD Operating Systems

CVE-2001-1145 · MEDIUM Severity

AV:L/AC:H/AU:N/C:C/I:C/A:C

fts routines in FreeBSD 4.3 and earlier, NetBSD before 1.5.2, and OpenBSD 2.9 and earlier can be forced to change (chdir) into a different directory than intended when the directory above the current directory is moved, which could cause scripts to perform dangerous actions on the wrong directories.

Learn more about our Web Application Penetration Testing UK.