CVE-2002-0766: High severity OpenBSD OpenBSD vulnerability
OpenBSD 2.9 through 3.1 allows local users to cause a denial of service (resource exhaustion) and gain root privileges by filling the kernel's file descriptor table and closing file descriptors 0, 1, or 2 before executing a privileged process, which is not properly handled when OpenBSD fails to open an alternate descriptor.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0766?
CVE-2002-0766 is considered to be a high severity vulnerability due to its potential to allow local users to gain root privileges.
How do I fix CVE-2002-0766?
To fix CVE-2002-0766, upgrade to OpenBSD versions 3.2 or later, where this vulnerability has been addressed.
What is the attack vector for CVE-2002-0766?
The attack vector for CVE-2002-0766 involves local users filling the kernel's file descriptor table to exploit the system before executing privileged processes.
Can CVE-2002-0766 affect remote users?
No, CVE-2002-0766 specifically affects local users who have access to the system.
Which versions of OpenBSD are affected by CVE-2002-0766?
CVE-2002-0766 affects OpenBSD versions 2.9 through 3.1.