Lucene search
HistoryApr 11, 2003 - 4:00 a.m.
CVE-2002-1420
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.3
Confidence
High
EPSS
0
Percentile
9.5%
Integer signedness error in select() on OpenBSD 3.1 and earlier allows local users to overwrite arbitrary kernel memory via a negative value for the size parameter, which satisfies the boundary check as a signed integer, but is later used as an unsigned integer during a data copying operation.
Affected configurations
Node
openbsdopenbsdMatch3.0
ORopenbsdopenbsdMatch3.1
Related
cert
cert
OpenBSD contains buffer overflow in "select" call
2002-08-15 00:00:00
cvelist
cvelist
CVE-2002-1420
2004-09-01 04:00:00
cve
cve
CVE-2002-1420
2004-09-01 04:00:00
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.3
Confidence
High
EPSS
0
Percentile
9.5%
Related for NVD:CVE-2002-1420