CVE-2010-1938Opie Vulnerability
Off-by-one error in the opiereadrec function in readrec.c in libopie in OPIE 2.4.1-test1 and earlier, as used on FreeBSD 6.4 through 8.1-PRERELEASE and other platforms, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a…
Published May 28, 2010 · Updated Apr 28, 2026
Key Facts
Patch immediately- CVE-2010-1938 is a critical-severity vulnerability (CVSS 9.3 v2) affecting Opie (Nrl), Freebsd.
- It is not listed in any known-exploited vulnerabilities catalog. Public exploit code is available.
- EPSS estimates a 22% probability of exploitation in the next 30 days.
- Fixed versions are available, including Opie <=2.4.1, Opie 2.4.1.
- Brandefense priority: patch immediately, because public exploit code exists for a high-severity flaw.
Scores
CVSS v2
9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS (30-day exploit likelihood)
22%
Higher than 97.6% of all scored CVEs
Exploit maturity
Proof of concept
ATLAS score
40/100
Publication score, see How it works
Exploitation Verdict
KEV listed
Not listed
Federal due date
None
No federal due date
Ransomware use
Not reported
Attributed actors
None named
Exploit & Defence Guidance
Exploit maturity
Proof of concept
Public exploit code
1
Proof-of-concept links
In-the-wild evidence
0
Reports of active use
Advisories And Exploit References
- advisory39963
- advisory39966
- advisoryFreeBSD-SA-10:05
Description
Off-by-one error in the opiereadrec function in readrec.c in libopie in OPIE 2.4.1-test1 and earlier, as used on FreeBSD 6.4 through 8.1-PRERELEASE and other platforms, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long username, as demonstrated by a long USER command to the FreeBSD 8.0 ftpd.
Affected Products
44 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| OpieNrl | 2.10, 2.11, 2.2, 2.21, 2.22, 2.3, 2.32, 2.4 | 2.4.1 |
| FreebsdFreebsd | 6.4, 6.4-release, 6.4-release_p2, 6.4-release_p3, 6.4-release_p4, 6.4-release_p5, 6.4-stable, 6-stable | n/a |
Patched Releases
Opie
<=2.4.1
Timeline
Publicly disclosed
May 28, 2010
Last updated
Apr 28, 2026
Weakness Type
- CWE-189
References
- advisory39963
- advisory39966
- advisoryFreeBSD-SA-10:05
- exploitExploitDB-12762
- otherblog.pi3.com.pl
FAQ
Common Questions.
Off-by-one error in the opiereadrec function in readrec.c in libopie in OPIE 2.4.1-test1 and earlier, as used on FreeBSD 6.4 through 8.1-PRERELEASE and other platforms, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long username, as demonstrated by a long…
Affected: Opie (Nrl) versions 2.10, 2.11, 2.2, 2.21, 2.22, 2.3, 2.32, 2.4; Freebsd versions 6.4, 6.4-release, 6.4-release_p2, 6.4-release_p3, 6.4-release_p4, 6.4-release_p5, 6.4-stable, 6-stable. The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
Public exploit code is available.
Fixed versions are available, including Opie <=2.4.1, Opie 2.4.1.
Brandefense priority: patch immediately, because public exploit code exists for a high-severity flaw.
Is CVE-2010-1938 On Your Attack Surface?
Brandefense matches it against the products discovered on your perimeter and opens a finding the day a CVE like this is listed.
Request A Demo