CVE:CVE-2006-1283
CNNVD:CNNVD-200603-381
在FreeBSD 4.10-RELEASE-p22至6.1-STABLE 20060322之前版本的Everything (OPIE)，其One-Time Passwords中的opiepasswd采用getlogin函数去判定激活用户账户，本地用户可配置OPIE访问根目录账户和可能取得根目录特权，如果根目录shell通过wheel和sshd配置被允许的话。
solution:Upgrade freebsd freebsd to a higher version than 1.1.5.1,2.0,2.0.5,2.1:stable,2.1.0,2.1.5,2.1.6,2.1.6.1,2.1.7,2.1.7.1,2.2,2.2.1,2.2.2,2.2.3,2.2.4,2.2.5,2.2.6,2.2.7,2.2.8,3.0,3.0:releng,3.1,3.2,3.3,3.4,3.5,3.5:stable,3.5.1,3.5.1:release,3.5.1:stable,4.0,4.0:alpha,4.0:releng,4.1,4.1.1,4.1.1:release,4.1.1:stable,4.2,4.2:stable,4.3,4.3:release,4.3:release_p38,4.3:releng,4.3:stable,4.4,4.4:release_p42,4.4:releng,4.4:stable,4.5,4.5:release,4.5:release_p32,4.5:releng,4.5:stable,4.6,4.6:release,4.6:release_p20,4.6:releng,4.6:stable,4.6.2,4.7,4.7:release,4.7:release_p17,4.7:releng,4.7:stable,4.8,4.8:pre-release,4.8:release_p7,4.8:releng,4.9,4.9:pre-release,4.9:releng,4.10,4.10:release,4.10:release_p8,4.10:releng,4.11:release_p3,4.11:releng,4.11:stable,5.0,5.0:alpha,5.0:release_p14,5.0:releng,5.1,5.1:alpha,5.1:release,5.1:release_p5,5.1:releng,5.2,5.2.1:release,5.2.1:releng,5.3,5.3:release,5.3:releng,5.3:stable,5.4:pre-release,5.4:release,5.4:releng,5.4:stable,6.0:release,6.0:stable,and avoid the version 1.1.5.1,2.0,2.0.5,2.1:stable,2.1.0,2.1.5,2.1.6,2.1.6.1,2.1.7,2.1.7.1,2.2,2.2.1,2.2.2,2.2.3,2.2.4,2.2.5,2.2.6,2.2.7,2.2.8,3.0,3.0:releng,3.1,3.2,3.3,3.4,3.5,3.5:stable,3.5.1,3.5.1:release,3.5.1:stable,4.0,4.0:alpha,4.0:releng,4.1,4.1.1,4.1.1:release,4.1.1:stable,4.2,4.2:stable,4.3,4.3:release,4.3:release_p38,4.3:releng,4.3:stable,4.4,4.4:release_p42,4.4:releng,4.4:stable,4.5,4.5:release,4.5:release_p32,4.5:releng,4.5:stable,4.6,4.6:release,4.6:release_p20,4.6:releng,4.6:stable,4.6.2,4.7,4.7:release,4.7:release_p17,4.7:releng,4.7:stable,4.8,4.8:pre-release,4.8:release_p7,4.8:releng,4.9,4.9:pre-release,4.9:releng,4.10,4.10:release,4.10:release_p8,4.10:releng,4.11:release_p3,4.11:releng,4.11:stable,5.0,5.0:alpha,5.0:release_p14,5.0:releng,5.1,5.1:alpha,5.1:release,5.1:release_p5,5.1:releng,5.2,5.2.1:release,5.2.1:releng,5.3,5.3:release,5.3:releng,5.3:stable,5.4:pre-release,5.4:release,5.4:releng,5.4:stable,6.0:release,6.0:stable