CVE-2011-2490

CVE-2011-2490 describes a privilege escalation vulnerability in opielogin.c within OPIE 2.4.1-test1 and earlier, affecting the nrl opie product. The flaw stems from opielogin's failure to check the return value of the setuid system call. This allows a local attacker to gain privileges by manipulating the system to ensure the target account has reached its maximum process limit. The vulnerability has a CVSS score of 7.2, indicating high severity with local access, low attack complexity, and complete impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.