CVE-2001-1029
2.1
CVSS v2.0 Base Score
1.37%
LOW RiskEPSS (68th percentile)
NVD-CWE-Other
libutil in OpenSSH on FreeBSD 4.4 and earlier does not drop privileges before verifying the capabilities for reading the copyright and welcome files, which allows local users to bypass the capabilities checks and read arbitrary files by specifying alternate copyright or welcome files.
Published: 9/20/2001
Modified: 6/16/2026
Vulnerability Summary
CVSS v2 Score
2.1
AV:L/AC:L/Au:N/C:P/I:N/A:N
EPSS Score (Exploitation Probability)
1.37%LOW Exploitation Risk
68th percentile
This vulnerability has a 1.37% probability of being exploited in the next 30 days, ranking higher than 68% of all scored CVEs.
CWE Classification
NVD-CWE-Other