Description
Multiple off-by-one errors in opiesu.c in opiesu in OPIE 2.4.1-test1 and earlier might allow local users to gain privileges via a crafted command line.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 6.0 | opie | 2.32.dfsg.1-0.2+squeeze1 | DSA-2281-1 |
| Debian 5.0 | opie | 2.32-10.2+lenny2 | DSA-2281-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | opie | 2.4-726.12 | openSUSE-SU-2024:10550-1 |
Advisories 2
- DSA-2281-1 opie - several Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:10550-1 opie-2.4-726.12 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- [oss-security] 20110623 Re: CVE requests: opie off by one and setuid() failure mailing-list
- [oss-security] 20110622 CVE requests: opie off by one and setuid() failure mailing-list
- openSUSE-SU-2011:0848 vendor-advisory
- https://bugzilla.novell.com/show_bug.cgi?id=698772
- https://bugzillafiles.novell.org/attachment.cgi?id=435902
- DSA-2281 vendor-advisory
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631344
- SUSE-SU-2011:0849 vendor-advisory
- 48390 vdb-entry
- 45448 third-party-advisory
- 45136 third-party-advisory