CVE-2002-0572

CVE-2002-0572 describes a vulnerability in FreeBSD 4.5 and earlier, and potentially other BSD-based operating systems, where local users can gain unauthorized read/write access to restricted files. This occurs by closing standard I/O file descriptors (0, 1, 2), which a subsequent setuid process might then reuse for its intended file operations. The vulnerability has a CVSS score of 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C), indicating a high severity with local access, low attack complexity, and complete confidentiality, integrity, and availability impacts. While not listed in CISA's KEV catalog, exploit code is available on ExploitDB, and the CVE has garnered significant community discussion with 10 mentions, suggesting awareness and potential for exploitation.