CVE-2025-0374 — Unprivileged access to system files

Description (CNA)

When etcupdate encounters conflicts while merging files, it saves a version containing conflict markers in /var/db/etcupdate/conflicts. This version does not preserve the mode of the input file, and is world-readable. This applies to files that would normally have restricted visibility, such as /etc/master.passwd. An unprivileged local user may be able to read encrypted root and user passwords from the temporary master.passwd file created in /var/db/etcupdate/conflicts. This is possible only when conflicts within the password file arise during an update, and the unprotected file is deleted when conflicts are resolved.

Affected (CNA)

Vendor / product	Versions
FreeBSD / FreeBSD	affected 14.2-RELEASE before p1; affected 14.1-RELEASE before p7; affected 13.4-RELEASE before p3

CWE

CWE-732

References

https://security.freebsd.org/advisories/FreeBSD-SA-25:03.etcupdate.asc

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

https://security.netapp.com/advisory/ntap-20250207-0007/