Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
CVE-2001-1559: OpenBSD 2.9/3.0 can be crashed by a local user
CVE-2001-1559 · published 24 years ago
Summary
The OpenBSD operating system versions 2.9 and 3.0 contain a coding mistake that lets someone with access to the computer cause the system to stop responding. This happens when a specific function is called incorrectly, leading to a crash. Apply the latest OpenBSD updates or patches to fix the issue.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| openbsd | openbsd |
2.9 3.0 cpe:2.3:o:openbsd:openbsd:2.9:*:*:*:*:*:*:* |
Original advisory text
The uipc system calls (uipc_syscalls.c) in OpenBSD 2.9 and 3.0 provide user mode return instead of versus rval kernel mode values to the fdrelease function, which allows local users to cause a deni...
The uipc system calls (uipc_syscalls.c) in OpenBSD 2.9 and 3.0 provide user mode return instead of versus rval kernel mode values to the fdrelease function, which allows local users to cause a denial of service and trigger a null dereference.
References
- http://archives.neohapsis.com/archives/bugtraq/2001-12/0014.html Broken Link Exploit
- http://monkey.org/openbsd/archive/tech/0112/msg00015.html Broken Link Exploit
- http://www.iss.net/security_center/static/7690.php Broken Link
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-476NULL Pointer Dereference
Timeline
Published31 Dec 2001
Updated31 Oct 2026
First seen29 Sep 2026
Sources
CVE-2001-1559 · NVD
Track software like this
Free during beta