CVE-2002-0766

CVE-2002-0766 describes a denial-of-service and privilege escalation vulnerability affecting OpenBSD versions 2.9 through 3.1. A local attacker can exhaust the kernel's file descriptor table and manipulate standard file descriptors (0, 1, or 2) before executing a privileged process, leading to resource exhaustion and root access. This vulnerability has a CVSS score of 7.2, indicating high severity with local access and low attack complexity, resulting in complete confidentiality, integrity, and availability impacts. There is no public exploit code available in common databases like Metasploit or ExploitDB, and it is not listed on the KEV catalog, suggesting it is not actively exploited. Despite this, the CVE has garnered significant community discussion, with 10 mentions, indicating ongoing interest.