CVE:CVE-2001-1029
CNNVD:CNNVD-200109-096
FreeBSD 4.4以及之前版本中OpenSSH的libutil在核查阅读版权和欢迎文件功能之前不能下降特权。本地用户通过指定替代版权或者欢迎文件绕过功能检查并读取任意文件。
solution:Upgrade openbsd openssh to a higher version than 4.5,and avoid the version 4.5; Upgrade freebsd freebsd to a higher version than 4.4,and avoid the version (,4.4]