CVE

Id
17387  
CVE No.
CVE-2006-1283  
Status
Candidate  
Description
opiepasswd in One-Time Passwords in Everything (OPIE) in FreeBSD 4.10-RELEASE-p22 through 6.1-STABLE before 20060322 uses the getlogin function to determine the invoking user account, which might allow local users to configure OPIE access to the root account and possibly gain root privileges if a root shell is permitted by the configuration of the wheel group or sshd.  
Phase
Assigned (20060319)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
143718 17387 CVE-2006-1283 FREEBSD:FreeBSD-SA-06:12  View
143719 17387 CVE-2006-1283 URL:ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:12.opie.asc  View
143720 17387 CVE-2006-1283 BID:17194  View
143721 17387 CVE-2006-1283 URL:http://www.securityfocus.com/bid/17194  View
143722 17387 CVE-2006-1283 VUPEN:ADV-2006-1074  View
143723 17387 CVE-2006-1283 URL:http://www.vupen.com/english/advisories/2006/1074  View
143724 17387 CVE-2006-1283 OSVDB:24067  View
143725 17387 CVE-2006-1283 URL:http://www.osvdb.org/24067  View
143726 17387 CVE-2006-1283 SECTRACK:1015817  View
143727 17387 CVE-2006-1283 URL:http://securitytracker.com/id?1015817  View
143728 17387 CVE-2006-1283 SECUNIA:19347  View
143729 17387 CVE-2006-1283 URL:http://secunia.com/advisories/19347  View
143730 17387 CVE-2006-1283 XF:bsd-opie-unauthorized-privileges(25397)  View

Related JVN