Unscored severity · published Aug 17, 2001
CVE-2001-1145
fts routines in FreeBSD 4.3 and earlier, NetBSD before 1.5.2, and OpenBSD 2.9 and earlier can be forced to change (chdir) into a different directory than intended when the…
–
CVSS
0.3%
EPSS
No
On KEV
Description
fts routines in FreeBSD 4.3 and earlier, NetBSD before 1.5.2, and OpenBSD 2.9 and earlier can be forced to change (chdir) into a different directory than intended when the directory above the current directory is moved, which could cause scripts to perform dangerous actions on the wrong directories.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 22% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FR
Freebsd · Freebsd
4.3 · source: NVD
NE
Netbsd · Netbsd
1.5; 1.5.1 · source: NVD
OP
Openbsd · Openbsd
through 2.9 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2001-1145
CVE.org
https://www.cve.org/CVERecord?id=CVE-2001-1145
Patch
http://archives.neohapsis.com/archives/netbsd/2001-q3/0204.html
www.iss.net
http://www.iss.net/security_center/static/8715.php
Patch
http://www.openbsd.org/errata28.html
www.osvdb.org
http://www.osvdb.org/5466
www.securityfocus.com
http://www.securityfocus.com/bid/3205
More from Freebsd
10.0
CVE-2024-43102
umtx Kernel panic or Use-After-Free
10.0
CVE-2018-17160
In FreeBSD before 11.2-STABLE(r341486) and 11.2-RELEASE-p6, insufficient bounds checking in one of the device models provided by bhyve can permit a guest operating system to…
9.8
CVE-2026-101306
Multiple jail filesystem root escapes
9.8
CVE-2026-58082
Stack based buffer overflow in iconv(3)
9.8
CVE-2026-58081
Heap based buffer overflow in iconv(3)