| Vulnerability Name: | CVE-2006-0098 (CCN-23991) | ||||||||
| Assigned: | 2006-01-05 | ||||||||
| Published: | 2006-01-05 | ||||||||
| Updated: | 2008-09-05 | ||||||||
| Summary: | The dupfdopen function in sys/kern/kern_descrip.c in OpenBSD 3.7 and 3.8 allows local users to re-open arbitrary files by using setuid programs to access file descriptors using /dev/fd/. | ||||||||
| CVSS v3 Severity: | 5.9 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||
| CVSS v2 Severity: | 4.6 Medium (CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P) 3.4 Low (Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
3.4 Low (CCN Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
| ||||||||
| Vulnerability Type: | CWE-Other | ||||||||
| Vulnerability Consequences: | Gain Privileges | ||||||||
| References: | Source: MISC Type: Patch ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.7/common/008_fd.patch Source: MITRE Type: CNA CVE-2006-0098 Source: CCN Type: SA18296 OpenBSD suid Programs File Re-Opening Vulnerability Source: SECUNIA Type: Patch, Vendor Advisory 18296 Source: CCN Type: SECTRACK ID: 1015437 OpenBSD Kernel dupfdopen() Bug May Let Local Users Re-open Files With Elevated Privileges Source: SECTRACK Type: UNKNOWN 1015437 Source: CCN Type: OpenBSD 3.8 errata 002: SECURITY FIX: January 5, 2006 Source: CCN Type: OpenBSD 3.7 errata 008: SECURITY FIX: January 5, 2006 Source: OPENBSD Type: Patch [3.7] 20060105 008: SECURITY FIX: January 5, 2006 Source: OSVDB Type: UNKNOWN 22231 Source: CCN Type: OSVDB ID: 22231 OpenBSD suid Programs /dev/fd File Re-Open Issue Source: BID Type: Patch 16144 Source: CCN Type: BID-16144 OpenBSD DEV/FD Arbitrary File Access Vulnerability Source: XF Type: UNKNOWN openbsd-fd-unauth-access(23991) | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||