CVE-2001-1029
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 1.4%
from disclosure to weapon0 days
Published on NVDSep 1
1st PoCSep 17
exploitation probability
1.4%top 31% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
libutil in OpenSSH on FreeBSD 4.4 and earlier does not drop privileges before verifying the capabilities for reading the copyright and welcome files, which allows local users to bypass the capabilities checks and read arbitrary files by specifying alternate copyright or welcome files.
Affected products
n/a · n/apublic PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/21114⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.