Description
opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges by arranging for an account to already be running its maximum number of processes.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 6.0 | opie | 2.32.dfsg.1-0.2+squeeze1 | DSA-2281-1 |
| Debian 5.0 | opie | 2.32-10.2+lenny2 | DSA-2281-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | opie | 2.4-726.12 | openSUSE-SU-2024:10550-1 |
Advisories 2
- DSA-2281-1 opie - several Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:10550-1 opie-2.4-726.12 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- [oss-security] 20110623 Re: CVE requests: opie off by one and setuid() failure mailing-list
- [oss-security] 20110622 CVE requests: opie off by one and setuid() failure mailing-list
- openSUSE-SU-2011:0848 vendor-advisory
- https://bugzilla.novell.com/show_bug.cgi?id=698772
- DSA-2281 vendor-advisory
- 39966 third-party-advisory
- SUSE-SU-2011:0849 vendor-advisory
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631345
- 48390 vdb-entry
- https://bugzillafiles.novell.org/attachment.cgi?id=435901
- 45448 third-party-advisory
- 45136 third-party-advisory