CVE-2002-2180

Опубликовано: 31 дек. 2002

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

The setitimer(2) system call in OpenBSD 2.0 through 3.1 does not properly check certain arguments, which allows local users to write to kernel memory and possibly gain root privileges, possibly via an integer signedness error.

Ссылки

ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.0/common/032_kerntime.patch
Patch
http://www.iss.net/security_center/static/10278.php
Patch
Vendor Advisory
http://www.openbsd.org/plus32.html
Exploit
Patch
Vendor Advisory
http://www.securityfocus.com/bid/5861
Patch
Vendor Advisory
ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.0/common/032_kerntime.patch
Patch
http://www.iss.net/security_center/static/10278.php
Patch
Vendor Advisory
http://www.openbsd.org/plus32.html
Exploit
Patch
Vendor Advisory
http://www.securityfocus.com/bid/5861
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:openbsd:openbsd:2.0:*:*:*:*:*:*:*

cpe:2.3:o:openbsd:openbsd:2.1:*:*:*:*:*:*:*

cpe:2.3:o:openbsd:openbsd:2.2:*:*:*:*:*:*:*

cpe:2.3:o:openbsd:openbsd:2.3:*:*:*:*:*:*:*

cpe:2.3:o:openbsd:openbsd:2.4:*:*:*:*:*:*:*

cpe:2.3:o:openbsd:openbsd:2.5:*:*:*:*:*:*:*

cpe:2.3:o:openbsd:openbsd:2.6:*:*:*:*:*:*:*

cpe:2.3:o:openbsd:openbsd:2.7:*:*:*:*:*:*:*

cpe:2.3:o:openbsd:openbsd:2.8:*:*:*:*:*:*:*

cpe:2.3:o:openbsd:openbsd:2.9:*:*:*:*:*:*:*

cpe:2.3:o:openbsd:openbsd:3.0:*:*:*:*:*:*:*

cpe:2.3:o:openbsd:openbsd:3.1:*:*:*:*:*:*:*

EPSS

Процентиль: 13%

0.00045

Низкий

6.8 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-fqm4-g2w4-w349

github

больше 3 лет назад