VulnerabilityModified
CVE-2002-2092
Race condition in exec in OpenBSD 4.0 and earlier, NetBSD 1.5.2 and earlier, and FreeBSD 4.4 and earlier allows local users to gain privileges by attaching a debugger to a process before the kernel has determined that the process is setuid or setgid.
LOW 3.7EPSS 0.31%
Does this matter?
Lower severity and a low EPSS score (0.31%). Track it; it rarely justifies an emergency change on its own.
Description
Race condition in exec in OpenBSD 4.0 and earlier, NetBSD 1.5.2 and earlier, and FreeBSD 4.4 and earlier allows local users to gain privileges by attaching a debugger to a process before the kernel has determined that the process is setuid or setgid.
- CVSS 2.0
- 3.7 LOWAV:L/AC:H/Au:N/C:P/I:P/A:P
- EPSS
- 0.31% probability · 23th percentile
- CISA KEV
- Not listed
- Affected
- freebsd/freebsd · netbsd/netbsd · openbsd/openbsd
- Source
- cve@mitre.org
References
- ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:08.exec.ascVendor Advisory
- ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-001.txt.asc
- http://www.osvdb.org/19475
- http://www.securityfocus.com/bid/3891Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7945
- ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:08.exec.ascVendor Advisory
- ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-001.txt.asc
- http://www.osvdb.org/19475
- http://www.securityfocus.com/bid/3891Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7945
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.