CVE-2007-0085
OpenBSD 3.x < 4.0 - 'vga_ioctl()' Local Privilege Escalation
Severity Score
7.8
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Unspecified vulnerability in sys/dev/pci/vga_pci.c in the VGA graphics driver for wscons in OpenBSD 3.9 and 4.0, when the kernel is compiled with the PCIAGP option and a non-AGP device is being used, allows local users to gain privileges via unspecified vectors, possibly related to agp_ioctl NULL pointer reference.
Vulnerabilidad no especificada en sys/dev/pci/vga_pci.c en los controladores gráficos VGA para wscons en OpenBSD 3.9 y 4.0, cuando el núcleo está compilado la opción PCIAGP y un dispositivo no-AGP está siendo usado, permite a un usuario local obtener privilegios a través de vectores no especificados, posiblemente relacionado con la referencia de puntero NULL agp_ioctl.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2007-01-04 CVE Reserved
- 2007-01-05 CVE Published
- 2007-01-07 First Exploit
- 2024-08-07 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
CAPEC
References (11)
| URL | Tag | Source |
|---|---|---|
| http://marc.info/?l=openbsd-cvs&m=116781980706409&w=2 | Mailing List | |
| http://marc.info/?l=openbsd-cvs&m=116785923301416&w=2 | Mailing List | |
| http://www.osvdb.org/32574 | Vdb Entry | |
| http://www.vupen.com/english/advisories/2007/0043 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/31276 | Vdb Entry |
| URL | Date | SRC |
|---|---|---|
| https://www.exploit-db.com/exploits/3094 | 2007-01-07 |
| URL | Date | SRC |
|---|---|---|
| http://secunia.com/advisories/23608 | 2017-07-29 | |
| http://securitytracker.com/id?1017468 | 2017-07-29 | |
| http://www.openbsd.org/errata.html#agp | 2017-07-29 | |
| http://www.openbsd.org/errata39.html#agp | 2017-07-29 |
| URL | Date | SRC |
|---|---|---|
| http://ilja.netric.org/files/Unusual%20bugs%2023c3.pdf | 2017-07-29 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Openbsd Search vendor "Openbsd" | Openbsd Search vendor "Openbsd" for product "Openbsd" | 3.9 Search vendor "Openbsd" for product "Openbsd" and version "3.9" | - |
Affected
| ||||||
| Openbsd Search vendor "Openbsd" | Openbsd Search vendor "Openbsd" for product "Openbsd" | 4.0 Search vendor "Openbsd" for product "Openbsd" and version "4.0" | - |
Affected
| ||||||