CVE-2002-0766: OpenBSD

High severity, CVSS 7.2. EPSS: 0.6% chance of exploitation in the next 30 days.

OpenBSD 2.9 through 3.1 allows local users to cause a denial of service (resource exhaustion) and gain root privileges by filling the kernel's file descriptor table and closing file descriptors 0, 1, or 2 before executing a privileged process, which is not properly handled when OpenBSD fails to open an alternate descriptor.

Affected products

• OpenBSD OpenBSD: version 2.9 only; version 3.0 only; version 3.1 only

Published 2002-08-12. Last modified 2026-06-16.