CVE-2010-0318 — The replay functionality for ZFS Intent Log (ZIL) in FreeBSD 7.1, 7.2, and 8.0, when creating files during replay of a setattr transaction, uses 7777 permissions instead of the original permissions, which might allow local users to read or modify unauthorized files in opportunistic circumstances after a system crash or power failure

Back Back to CVE browser

MEDIUM

The replay functionality for ZFS Intent Log (ZIL) in FreeBSD 7.1, 7.2, and 8.0, when creating files during replay of a setattr transaction, uses 7777 permissions instead of the original permissions, which might allow local users to read or modify unauthorized files in opportunistic circumstances after a system crash or power failure

Published Jan 15, 2010

6.9

MEDIUM

CVSS 2.0

EPSS 0.33%

Description

The replay functionality for ZFS Intent Log (ZIL) in FreeBSD 7.1, 7.2, and 8.0, when creating files during replay of a setattr transaction, uses 7777 permissions instead of the original permissions, which might allow local users to read or modify unauthorized files in opportunistic circumstances after a system crash or power failure.

Affected products

Remediation

No remediation recorded yet.

Metrics

0.33% 0.00332

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 2, 2026.

EPSS probability 0.00332

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (9 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 2, 2026	0.33% (0.00332)	24.08th	v5 (v2026.06.15)
Jun 15, 2026	0.33% (0.00332)	24.71th	v5 (v2026.06.15)
Mar 17, 2025	0.03% (0.00034)	6.52th	v4 (v2025.03.14)
Dec 12, 2024	0.04% (0.00042)	5.07th	v3 (v2023.03.01)
Mar 7, 2023	0.04% (0.00042)	5.63th	v3 (v2023.03.01)
Mar 6, 2023	0.95% (0.00950)	32.28th	v2 (v2022.01.01)
Sep 10, 2022	0.95% (0.00950)	30.63th	v2 (v2022.01.01)
Apr 1, 2022	0.95% (0.00950)	28.61th	v2 (v2022.01.01)
Feb 4, 2022	0.95% (0.00950)	13.46th	v2 (v2022.01.01)

Weaknesses (1)

CWE-264

References (4)

http://secunia.com/advisories/38124
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://security.FreeBSD.org/advisories/FreeBSD-SA-10:03.zfs.asc
vendor-advisoryx_refsource_FREEBSDPatchVendor Advisory
http://www.securityfocus.com/bid/37657
vdb-entryx_refsource_BID
http://www.securitytracker.com/id?1023407
vdb-entryx_refsource_SECTRACK

Link	Providers	Tags
http://secunia.com/advisories/38124		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://security.FreeBSD.org/advisories/FreeBSD-SA-10:03.zfs.asc		vendor-advisoryx_refsource_FREEBSDPatchVendor Advisory
http://www.securityfocus.com/bid/37657		vdb-entryx_refsource_BID
http://www.securitytracker.com/id?1023407		vdb-entryx_refsource_SECTRACK

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jan 15, 2010

Updated Aug 7, 2024

Reserved Jan 15, 2010

Link CVE-2010-0318

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2010-0318

Red Hat

Severity n/a

Public date n/a

Links CVE-2010-0318