Unscored CVE-2006-0098 EUVD-2006-0106GHSA-pm7p-h6w7-hvg5

The dupfdopen function in sys/kern/kern_descrip.c in OpenBSD 3.7 and 3.8 allows local users to re-open arbitrary files by using setuid prog…

Published Jan 6, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

The dupfdopen function in sys/kern/kern_descrip.c in OpenBSD 3.7 and 3.8 allows local users to re-open arbitrary files by using setuid programs to access file descriptors using /dev/fd/.

References

22231 vdb-entry
16144 vdb-entry
1015437 vdb-entry
[3.7] 20060105 008: SECURITY FIX: January 5, 2006 vendor-advisory
18296 third-party-advisory