CVE-2006-1283

CVE-2006-1283 describes a vulnerability in the opiepasswd utility within One-Time Passwords in Everything (OPIE) in FreeBSD versions 4.10-RELEASE-p22 through 6.1-STABLE before 20060322. The vulnerability arises from opiepasswd's reliance on the getlogin function to identify the invoking user. This flaw could allow a local user to configure OPIE access for the root account, potentially leading to root privilege escalation if root shell access is permitted by wheel group or sshd configurations. This vulnerability is rated with a CVSS score of 7.2, indicating high severity due to its local attack vector (AV:L), low attack complexity (AC:L), and complete compromise of confidentiality, integrity, and availability (C:C/I:C/A:C). The potential impact is significant, as it could grant an attacker root privileges on the affected system. Currently, there is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting a low level of public attention.