← Back

CVE-2006-1283

nvd nist
Published: Mar 23, 2006Modified: Apr 16, 2026

JSON object

Loading...
7.2
Vector
AV:L/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 3.9 / Impact: 10.0
Source: NVD

Description

opiepasswd in One-Time Passwords in Everything (OPIE) in FreeBSD 4.10-RELEASE-p22 through 6.1-STABLE before 20060322 uses the getlogin function to determine the invoking user account, which might allow local users to configure OPIE access to the root account and possibly gain root privileges if a root shell is permitted by the configuration of the wheel group or sshd.

Affected (100)

Products: Freebsd: Freebsd
1 product
Freebsd
Configuration A
100 vulnerable
Vulnerable SoftwareAffected Versions
Freebsd
Version 1.1.5.1
Version 2.0.5
Version 2.0
Version 2.1.0
Version 2.1.5
Version 2.1.6.1
Version 2.1.6
Version 2.1.7.1
Version 2.1.7
Version 2.1 stable
Version 2.2.1
Version 2.2.2
Version 2.2.3
Version 2.2.4
Version 2.2.5
Version 2.2.6
Version 2.2.7
Version 2.2.8
Version 2.2
Version 3.0
Version 3.0 releng
Version 3.1
Version 3.2
Version 3.3
Version 3.4
Version 3.5.1
Version 3.5.1 release
Version 3.5.1 stable
Version 3.5
Version 3.5 stable
Version 4.0
Version 4.0 alpha
Version 4.0 releng
Version 4.1.1
Version 4.1.1 release
Version 4.1.1 stable
Version 4.10
Version 4.10 release
Version 4.10 release_p8
Version 4.10 releng
Version 4.11 release_p3
Version 4.11 releng
Version 4.11 stable
Version 4.1
Version 4.2
Version 4.2 stable
Version 4.3
Version 4.3 release
Version 4.3 release_p38
Version 4.3 releng
Version 4.3 stable
Version 4.4
Version 4.4 release_p42
Version 4.4 releng
Version 4.4 stable
Version 4.5
Version 4.5 release
Version 4.5 release_p32
Version 4.5 releng
Version 4.5 stable
Version 4.6.2
Version 4.6
Version 4.6 release
Version 4.6 release_p20
Version 4.6 releng
Version 4.6 stable
Version 4.7
Version 4.7 release
Version 4.7 release_p17
Version 4.7 releng
Version 4.7 stable
Version 4.8
Version 4.8 pre-release
Version 4.8 release_p7
Version 4.8 releng
Version 4.9
Version 4.9 pre-release
Version 4.9 releng
Version 5.0
Version 5.0 alpha
Version 5.0 release_p14
Version 5.0 releng
Version 5.1
Version 5.1 alpha
Version 5.1 release
Version 5.1 release_p5
Version 5.1 releng
Version 5.2.1 release
Version 5.2.1 releng
Version 5.2
Version 5.3
Version 5.3 release
Version 5.3 releng
Version 5.3 stable
Version 5.4 pre-release
Version 5.4 release
Version 5.4 releng
Version 5.4 stable
Version 6.0 release
Version 6.0 stable

References (14)

ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:12.opie.asc (unsafe URL)
Source: secteam@freebsd.org
PatchVendor Advisory
Source: secteam@freebsd.org
Vendor Advisory
Source: secteam@freebsd.org
Source: secteam@freebsd.org
Source: secteam@freebsd.org
Patch
Source: secteam@freebsd.org
Vendor Advisory
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:12.opie.asc (unsafe URL)
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.