CVE-2006-1283 | BDVDB-2026-15830 Detail

Description#

opiepasswd in One-Time Passwords in Everything (OPIE) in FreeBSD 4.10-RELEASE-p22 through 6.1-STABLE before 20060322 uses the getlogin function to determine the invoking user account, which might allow local users to configure OPIE access to the root account and possibly gain root privileges if a root shell is permitted by the configuration of the wheel group or sshd.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/25397
http://securitytracker.com/id?1015817
http://www.securityfocus.com/bid/17194
http://secunia.com/advisories/19347
http://www.osvdb.org/24067
http://www.vupen.com/english/advisories/2006/1074

Exploit#

No public exploit known

History#

Version 12006-03-23Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.