NVD

Id
81131  
Name
CVE-2002-2180  
Description
The setitimer(2) system call in OpenBSD 2.0 through 3.1 does not properly check certain arguments, which allows local users to write to kernel memory and possibly gain root privileges, possibly via an integer signedness error.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.1  
CVSS Vector
(AV:L/AC:L/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-05  
Published
2002-12-31  
Modified Date
2008-09-05  
Seq
2002-2180  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
403344 81131 CVE-2002-2180 ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.0/common/032_kerntime.patch  View
403345 81131 CVE-2002-2180 openbsd-setitimer-memory-overwrite(10278)  View
403346 81131 CVE-2002-2180 20021002 Incorrect argument checking in the setitimer(2) system call may allow an attacker to write to kernel memory.  View
403347 81131 CVE-2002-2180 5861  View

Related JVN