CVE-1999-0062

Summary

CVE-1999-0062 is a vulnerability affecting the chpass command in OpenBSD. A local user can exploit this issue by leveraging file descriptor leakage to gain root access, bypassing access control restrictions. This vulnerability poses a significant security risk, as it allows unauthorized users to elevate their privileges to the highest level on the system. It is important for OpenBSD users to apply the available patch as soon as possible to mitigate this risk. The file descriptor leakage occurs during the password change process, enabling an attacker to manipulate system calls and eventually escalate their privileges.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.