CVE-2011-2490

opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges…

published July 27, 2011

CVSS
—
EPSS
1%
Percentile
43.9
In the wild
Unconfirmed
What it is

opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges by arranging for an account to already be running its maximum number of processes.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00534 · 43.9th percentile
Published
2011-07-27T01:29Z
EPSS history
Timeline
  • 27 JUL 01:29Z
    opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges…
    cvelistv5