CVE-2010-0318

Severity: medium (CVSS 6.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-01-15 · updated 2026-06-16
Weakness: CWE-264

Description

The replay functionality for ZFS Intent Log (ZIL) in FreeBSD 7.1, 7.2, and 8.0, when creating files during replay of a setattr transaction, uses 7777 permissions instead of the original permissions, which might allow local users to read or modify unauthorized files in opportunistic circumstances after a system crash or power failure.

Affected products

FreeBSD: 7.1, 7.2, 8.0

References

http://secunia.com/advisories/38124
http://security.FreeBSD.org/advisories/FreeBSD-SA-10:03.zfs.asc
http://www.securityfocus.com/bid/37657
http://www.securitytracker.com/id?1023407
http://secunia.com/advisories/38124
http://security.FreeBSD.org/advisories/FreeBSD-SA-10:03.zfs.asc
http://www.securityfocus.com/bid/37657
http://www.securitytracker.com/id?1023407

Get alerted when CVE-2010-0318 or the next vulnerability affects your stack