CVE-2002-2092

Severity: low (CVSS 3.7 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2002-12-31 · updated 2026-06-16

Description

Race condition in exec in OpenBSD 4.0 and earlier, NetBSD 1.5.2 and earlier, and FreeBSD 4.4 and earlier allows local users to gain privileges by attaching a debugger to a process before the kernel has determined that the process is setuid or setgid.

Affected products

FreeBSD: 2.0, 2.1.0, 2.2, 2.2.2, 2.2.3, 2.2.4 (+24)
Netbsd: 1.3, 1.3.1, 1.3.2, 1.3.3, 1.4, 1.4.1 (+5)
OpenBSD: 2.0, 2.1, 2.2, 2.3, 2.4, 2.5 (+5)

References

http://www.osvdb.org/19475
http://www.securityfocus.com/bid/3891
https://exchange.xforce.ibmcloud.com/vulnerabilities/7945
http://www.osvdb.org/19475
http://www.securityfocus.com/bid/3891
https://exchange.xforce.ibmcloud.com/vulnerabilities/7945

Get alerted when CVE-2002-2092 or the next vulnerability affects your stack