Matthew Macy

2 exploits Active since Aug 2020

CVE-2020-24716 WRITEUP HIGH WRITEUP

Openzfs < 0.8.4 - Incorrect Authorization

OpenZFS before 2.0.0-rc1, when used on FreeBSD, allows execute permissions for all directories.

CVSS 7.8

View Code

CVE-2020-24717 WRITEUP HIGH WRITEUP

Openzfs < 0.8.4 - Incorrect Default Permissions

OpenZFS before 2.0.0-rc1, when used on FreeBSD, misinterprets group permissions as user permissions, as demonstrated by mode 0770 being equivalent to mode 0777.

CVSS 7.8

View Code