Nrl Opie vulnerabilities
3 known vulnerabilities affecting nrl/opie.
Total CVEs
3
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL1HIGH2
Vulnerabilities
Page 1 of 1
CVE-2010-1938P2CRITICALCVSS 9.3PoC≤ 2.4.1v2.2+7 more2010-05-28
CVE-2010-1938 [CRITICAL] CWE-189 CVE-2010-1938: Off-by-one error in the __opiereadrec function in readrec.c in libopie in OPIE 2.4.1-test1 and earli
Off-by-one error in the __opiereadrec function in readrec.c in libopie in OPIE 2.4.1-test1 and earlier, as used on FreeBSD 6.4 through 8.1-PRERELEASE and other platforms, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long username, as demonstrated by a long USER command to the FreeBSD 8.
nvd
CVE-2011-2489P4HIGHCVSS 7.2≤ 2.4.1v2.2+7 more2011-07-27
CVE-2011-2489 [HIGH] CWE-189 CVE-2011-2489: Multiple off-by-one errors in opiesu.c in opiesu in OPIE 2.4.1-test1 and earlier might allow local u
Multiple off-by-one errors in opiesu.c in opiesu in OPIE 2.4.1-test1 and earlier might allow local users to gain privileges via a crafted command line.
nvd
CVE-2011-2490P4HIGHCVSS 7.2≤ 2.4.1v2.2+7 more2011-07-27
CVE-2011-2490 [HIGH] CWE-20 CVE-2011-2490: opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the setu
opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges by arranging for an account to already be running its maximum number of processes.
nvd