CVE-2002-1669

FreeBSD pkg_add (versions 4.2–4.4) creates a temporary directory with world-writable permissions, enabling local users to modify world-writable package components during installation. Root cause: insecure temporary directory permissions. Exploitation details are not provided in the documents, and...

CVE-2002-1669

pkgadd in FreeBSD 4.2 through 4.4 creates a temporary directory with world-searchable permissions, which may allow local users to modify world-writable parts of the package during installation...