CVE-2001-1029

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2001-09-20 · updated 2026-06-16

Description

libutil in OpenSSH on FreeBSD 4.4 and earlier does not drop privileges before verifying the capabilities for reading the copyright and welcome files, which allows local users to bypass the capabilities checks and read arbitrary files by specifying alternate copyright or welcome files.

Affected products

FreeBSD: through 4.4
OpenSSH: 4.5

References

http://archives.neohapsis.com/archives/bugtraq/2001-09/0173.html
http://www.osvdb.org/6073
https://exchange.xforce.ibmcloud.com/vulnerabilities/8697
http://archives.neohapsis.com/archives/bugtraq/2001-09/0173.html
http://www.osvdb.org/6073
https://exchange.xforce.ibmcloud.com/vulnerabilities/8697

Get alerted when CVE-2001-1029 or the next vulnerability affects your stack