CVE-2002-2180 in OpenBSD

Summary

The setitimer(2) system call in OpenBSD 2.0 through 3.1 does not properly check certain arguments, which allows local users to write to kernel memory and possibly gain root privileges, possibly via an integer signedness error.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Reservation: 11/16/2005
• Disclosure: 12/31/2002
• Moderation: VulDB entry created
• Entries: VDB-19822 (1)
• CPE: ready
• CWE: CWE-192 (Confirmed)
• CVSS: 7.8
• EPSS: 0.00144
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-2180
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-2180
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-2180/