CVE-2006-0098 : The dupfdopen function in sys/kern/kern_descrip.c in OpenBSD 3.7 and 3.8 allows local users to re-open arbitrary files b

The dupfdopen function in sys/kern/kern_descrip.c in OpenBSD 3.7 and 3.8 allows local users to re-open arbitrary files by using setuid programs to access file descriptors using /dev/fd/.

Published 2006-01-06 11:03:00

Updated 2008-09-05 20:58:21

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2006-0098

EPSS FAQ

0.06%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 24 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2006-0098

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
4.6	MEDIUM	AV:L/AC:L/Au:N/C:P/I:P/A:P	3.9	6.4	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

Products affected by CVE-2006-0098

Openbsd » Openbsd » Version: 3.8
cpe:2.3:o:openbsd:openbsd:3.8:*:*:*:*:*:*:*
Matching versions
Openbsd » Openbsd » Version: 3.7
cpe:2.3:o:openbsd:openbsd:3.7:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2006-0098

Exploit prediction scoring system (EPSS) score for CVE-2006-0098

CVSS scores for CVE-2006-0098

References for CVE-2006-0098

Products affected by CVE-2006-0098