Lucene search
MitreCVE-2002-2180HistoryNov 16, 2005 - 9:17 p.m.
CVE-2002-2180
2005-11-1621:17:00
mitre
web.nvd.nist.gov
23
cve-2002-2180
openbsd
setitimer
system call
integer signedness error
nvd
security vulnerability
CVSS2
6.8
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:S/C:C/I:C/A:C
AI Score
7
Confidence
High
EPSS
0
Percentile
5.1%
The setitimer(2) system call in OpenBSD 2.0 through 3.1 does not properly check certain arguments, which allows local users to write to kernel memory and possibly gain root privileges, possibly via an integer signedness error.
Affected configurations
Node
openbsdopenbsdMatch2.0
ORopenbsdopenbsdMatch2.1
ORopenbsdopenbsdMatch2.2
ORopenbsdopenbsdMatch2.3
ORopenbsdopenbsdMatch2.4
ORopenbsdopenbsdMatch2.5
ORopenbsdopenbsdMatch2.6
ORopenbsdopenbsdMatch2.7
ORopenbsdopenbsdMatch2.8
ORopenbsdopenbsdMatch2.9
ORopenbsdopenbsdMatch3.0
ORopenbsdopenbsdMatch3.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| openbsd | openbsd | 2.0 | cpe:2.3:o:openbsd:openbsd:2.0:*:*:*:*:*:*:* |
| openbsd | openbsd | 2.1 | cpe:2.3:o:openbsd:openbsd:2.1:*:*:*:*:*:*:* |
| openbsd | openbsd | 2.2 | cpe:2.3:o:openbsd:openbsd:2.2:*:*:*:*:*:*:* |
| openbsd | openbsd | 2.3 | cpe:2.3:o:openbsd:openbsd:2.3:*:*:*:*:*:*:* |
| openbsd | openbsd | 2.4 | cpe:2.3:o:openbsd:openbsd:2.4:*:*:*:*:*:*:* |
| openbsd | openbsd | 2.5 | cpe:2.3:o:openbsd:openbsd:2.5:*:*:*:*:*:*:* |
| openbsd | openbsd | 2.6 | cpe:2.3:o:openbsd:openbsd:2.6:*:*:*:*:*:*:* |
| openbsd | openbsd | 2.7 | cpe:2.3:o:openbsd:openbsd:2.7:*:*:*:*:*:*:* |
| openbsd | openbsd | 2.8 | cpe:2.3:o:openbsd:openbsd:2.8:*:*:*:*:*:*:* |
| openbsd | openbsd | 2.9 | cpe:2.3:o:openbsd:openbsd:2.9:*:*:*:*:*:*:* |
CVSS2
6.8
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:S/C:C/I:C/A:C
AI Score
7
Confidence
High
EPSS
0
Percentile
5.1%
Related for CVE-2002-2180