CVE-2001-1415: vi.recover in OpenBSD before 3.1 allows local users to remove arbitrary zero-byte files such as device nodes.

Security readout for executives and security teams

CVE-2001-1415 is an old OpenBSD flaw in vi.recover. On OpenBSD versions before 3.1, a local user could cause deletion of arbitrary zero-byte files, including device nodes. This is mainly a legacy-system risk and requires local access, but it can disrupt system integrity or availability on affected hosts. Exposure is likely limited to legacy OpenBSD systems older than 3.1, especially where untrusted or many local shell users exist. Modern or upgraded OpenBSD systems are not indicated as affected by the provided sources. Low to moderate priority unless the organization still operates OpenBSD before 3.1 with local user access. For typical modern environments, urgency is low. For legacy exposed multi-user systems, prioritize upgrade, isolation, or retirement. Mitigation focus: Identify any OpenBSD systems older than 3.1.; Upgrade affected OpenBSD hosts where feasible.; Review the official OpenBSD patch reference for applicable legacy fixes..

Prepared

Jul 11, 2026, 20:10 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.