CVE-2002-2180: Medium severity OpenBSD OpenBSD vulnerability
Published Dec 31, 2002
·Updated
The setitimer(2) system call in OpenBSD 2.0 through 3.1 does not properly check certain arguments, which allows local users to write to kernel memory and possibly gain root privileges, possibly via an integer signedness error.
Affected Software
12 affected components
OpenBSD OpenBSD=2.8
OpenBSD OpenBSD=3.1
OpenBSD OpenBSD=2.9
OpenBSD OpenBSD=2.1
OpenBSD OpenBSD=2.2
OpenBSD OpenBSD=2.0
OpenBSD OpenBSD=2.7
OpenBSD OpenBSD=2.4
OpenBSD OpenBSD=3.0
OpenBSD OpenBSD=2.6
OpenBSD OpenBSD=2.5
OpenBSD OpenBSD=2.3
Remediation
Patch Available
Patch Available
Patch Available
Event History
Dec 31, 2002
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
RemedyDescriptionSeverityAffected Software
Nov 16, 2005
CVE Published
via MITRE·09:17 PM
Data Sourced
via MITRE·09:17 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-2180?
CVE-2002-2180 is considered a high severity vulnerability due to its potential to allow local users to write to kernel memory and gain root privileges.
2
How do I fix CVE-2002-2180?
To fix CVE-2002-2180, users should upgrade to a version of OpenBSD that is not affected by this vulnerability.
3
Which versions of OpenBSD are affected by CVE-2002-2180?
CVE-2002-2180 affects OpenBSD versions from 2.0 through 3.1.
4
What type of attack does CVE-2002-2180 enable?
CVE-2002-2180 enables local users to exploit a signedness error to manipulate kernel memory.
5
Is CVE-2002-2180 a remote or local vulnerability?
CVE-2002-2180 is a local vulnerability, which requires local access to the system to exploit.