CVE-2002-1420

CVE-2002-1420 describes an integer signedness error in the select() function of OpenBSD 3.1 and earlier. This flaw allows local attackers to achieve arbitrary kernel memory overwrite by providing a negative size parameter, which bypasses boundary checks due to signed integer interpretation but is then used as an unsigned integer during data copying. The vulnerability carries a CVSS score of 7.2, indicating high severity with local access, low attack complexity, and complete confidentiality, integrity, and availability impacts. Despite its severity, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this older vulnerability.