CVE-2002-2180

Severity

68%

Complexity

31%

Confidentiality

165%

The setitimer(2) system call in OpenBSD 2.0 through 3.1 does not properly check certain arguments, which allows local users to write to kernel memory and possibly gain root privileges, possibly via an integer signedness error.

CVSS 2.0 Base Score 6.8. CVSS Attack Vector: local. CVSS Attack Complexity: low. CVSS Vector: (AV:L/AC:L/Au:S/C:C/I:C/A:C).

Overview

Type

OpenBSD

First reported 22 years ago

2002-12-31 05:00:00

Last updated 16 years ago

2008-09-05 20:32:00

Affected Software

OpenBSD 2.0

2.0

OpenBSD 2.1

2.1

OpenBSD 2.2

2.2

OpenBSD 2.3

2.3

OpenBSD 2.4

2.4

OpenBSD 2.5

2.5

OpenBSD 2.6

2.6

OpenBSD 2.7

2.7

OpenBSD 2.8

2.8

OpenBSD 2.9

2.9

OpenBSD 3.0

3.0

OpenBSD 3.1

3.1

References

ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.0/common/032_kerntime.patch

Patch

openbsd-setitimer-memory-overwrite(10278)

Patch, Vendor Advisory

20021002 Incorrect argument checking in the setitimer(2) system call may allow an attacker to write to kernel memory.

Exploit, Patch, Vendor Advisory

5861