CVE-2006-0098: OpenBSD

Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days.

The dupfdopen function in sys/kern/kern_descrip.c in OpenBSD 3.7 and 3.8 allows local users to re-open arbitrary files by using setuid programs to access file descriptors using /dev/fd/.

Affected products

• OpenBSD OpenBSD: version 3.7 only; version 3.8 only

Published 2006-01-06. Last modified 2026-06-16.