01 Record
CVE-2010-1938
Off-by-one error in the __opiereadrec function in readrec.c in libopie in OPIE 2.4.1-test1 and earlier, as used on FreeBSD 6.4 through 8.1-PRERELEASE and other platforms, allows remote attackers to
UnratedPUBLISHEDCNA: mitre
CNA base scoreUnratedNo CNA CVSS vector
02 Description
Off-by-one error in the __opiereadrec function in readrec.c in libopie in OPIE 2.4.1-test1 and earlier, as used on FreeBSD 6.4 through 8.1-PRERELEASE and other platforms, allows remote attackers to
03 Exploitation and scoring
- Exploitation
- Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
- SSVC decision
- Not assessed by CISA
- EPSS probability
- 22.06% probability of exploitation activity in the next 30 days.
- EPSS percentile
- Equal to or higher than the score of 97.6% of scored records. A rank, not a probability.
- NVD base score
- The NVD has published no score for this record
- NVD CVSS vector
- No NVD score to derive
- NVD analysis status
- Modified. NVD last modified this record on 2026-06-16.
- Red Hat severity
- No Red Hat rating. Red Hat rates the CVEs that affect its products.
Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.
04 Metadata
- Published
- 2010-05-28 18:00Z16 YR AGO
- Last updated
- 2024-08-07 02:17Z2 YR AGO
- Reserved
- 2010-05-13
- Assigning CNA
- mitre
- Record state
- PUBLISHED
- Severity
- Not rated by the issuing CNA
- CNA CVSS vector
- Not published by the issuing CNA
- Weaknesses
- Data version
- 5.1
- Document digest
- 4b354ce97da26f94e65f7ff05a06a0663bbcde27ad449c25d0d7ea4f10b0349c
05 Affected products
06 References
- blog.pi3.com.plhttp://blog.pi3.com.pl/?p=111
- securityreason.com7450http://securityreason.com/securityalert/7450
- www.securityfocus.com40403http://www.securityfocus.com/bid/40403
- site.pi3.com.plhttp://site.pi3.com.pl/adv/libopie-adv.txt
- securitytracker.com1024040http://securitytracker.com/id?1024040
- www.debian.orgDSA-2281http://www.debian.org/security/2011/dsa-2281
- security.freebsd.orgFreeBSD-SA-10:05http://security.FreeBSD.org/advisories/FreeBSD-SA-10:05.opie.asc
- secunia.com39966http://secunia.com/advisories/39966
- www.exploit-db.com12762http://www.exploit-db.com/exploits/12762
- securityreason.com20100527 libopie __readrec() off-by one (FreeBSD ftpd remote PoC)http://securityreason.com/achievement_securityalert/87
- securitytracker.com1025709http://securitytracker.com/id?1025709
- bugs.debian.orghttp://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584932
- secunia.com39963http://secunia.com/advisories/39963
- secunia.com45136http://secunia.com/advisories/45136