CVE-2006-1283: High severity FreeBSD FreeBSD vulnerability
opiepasswd in One-Time Passwords in Everything (OPIE) in FreeBSD 4.10-RELEASE-p22 through 6.1-STABLE before 20060322 uses the getlogin function to determine the invoking user account, which might allow local users to configure OPIE access to the root account and possibly gain root privileges if a root shell is permitted by the configuration of the wheel group or sshd.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-1283?
CVE-2006-1283 is classified as a high severity vulnerability due to the potential for local users to gain root privileges.
How do I fix CVE-2006-1283?
To fix CVE-2006-1283, update your FreeBSD system to a patched version released after March 22, 2006.
What system versions are affected by CVE-2006-1283?
CVE-2006-1283 affects FreeBSD versions from 4.10-RELEASE-p22 through 6.1-STABLE before the patch date.
Can I exploit CVE-2006-1283 remotely?
CVE-2006-1283 is a local privilege escalation vulnerability, meaning it cannot be exploited remotely.
What is the potential impact of CVE-2006-1283?
The potential impact of CVE-2006-1283 includes unauthorized access to the root account, leading to full system control.