The vulnerability of the /var/db/etcupdate/conflicts component in operating systems like FreeBSD allows a hacker to exploit it to disclose protected information.

The vulnerability of the /var/db/etcupdate/conflicts component in FreeBSD systems is related to the improper assignment of permissions for the critical resource. Exploiting this vulnerability can allow a malicious actor to disclose protected information from a remote location...

CVE-2025-0374

When etcupdate encounters conflicts while merging files, it saves a version containing conflict markers in /var/db/etcupdate/conflicts. This version does not preserve the mode of the input file, and is world-readable. This applies to files that would normally have restricted visibility, such as...

CVE-2025-0374: Incorrect Permission Assignment for Critical Resource

When etcupdate encounters conflicts while merging files, it saves a version containing conflict markers in /var/db/etcupdate/conflicts. This version does not preserve the mode of the input file, and is world-readable. This applies to files that would normally have restricted visibility, such as...