CVE-2002-2180
First published: Tue Dec 31 2002(Updated: )
The setitimer(2) system call in OpenBSD 2.0 through 3.1 does not properly check certain arguments, which allows local users to write to kernel memory and possibly gain root privileges, possibly via an integer signedness error.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| OpenBSD | =2.8 | |
| OpenBSD | =3.1 | |
| OpenBSD | =2.9 | |
| OpenBSD | =2.1 | |
| OpenBSD | =2.2 | |
| OpenBSD | =2.0 | |
| OpenBSD | =2.7 | |
| OpenBSD | =2.4 | |
| OpenBSD | =3.0 | |
| OpenBSD | =2.6 | |
| OpenBSD | =2.5 | |
| OpenBSD | =2.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2002-2180?
CVE-2002-2180 is considered a high severity vulnerability due to its potential to allow local users to write to kernel memory and gain root privileges.
How do I fix CVE-2002-2180?
To fix CVE-2002-2180, users should upgrade to a version of OpenBSD that is not affected by this vulnerability.
Which versions of OpenBSD are affected by CVE-2002-2180?
CVE-2002-2180 affects OpenBSD versions from 2.0 through 3.1.
What type of attack does CVE-2002-2180 enable?
CVE-2002-2180 enables local users to exploit a signedness error to manipulate kernel memory.
Is CVE-2002-2180 a remote or local vulnerability?
CVE-2002-2180 is a local vulnerability, which requires local access to the system to exploit.
- agent/first-publish-date
- agent/remedy
- agent/softwarecombine
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/author
- agent/last-modified-date
- agent/references
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/openbsd
- canonical/openbsd
- version/openbsd/2.8
- version/openbsd/3.1
- version/openbsd/2.9
- version/openbsd/2.1
- version/openbsd/2.2
- version/openbsd/2.0
- version/openbsd/2.7
- version/openbsd/2.4
- version/openbsd/3.0
- version/openbsd/2.6
- version/openbsd/2.5
- version/openbsd/2.3