CVE-2003-1366

CVE-2003-1366 describes a local information disclosure vulnerability in the chpass utility across OpenBSD versions 2.0 through 3.2. An attacker could exploit a hard link attack on a temporary file used by chpass to read portions of arbitrary files on the system. With a CVSS score of 3.3, this vulnerability has low severity, requiring local access and medium attack complexity to achieve partial confidentiality and integrity impact. While no active exploitation or Metasploit/Nuclei modules are reported, an ExploitDB entry exists, and there is minimal community discussion or media coverage surrounding this older CVE.