Lucene search
HistoryJun 25, 2002 - 4:00 a.m.
CVE-2002-0211
cve-2002-0211
tarantella enterprise 3
race condition
local users
arbitrary commands
security vulnerability
installation script
6.2 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:H/Au:N/C:C/I:C/A:C
7.6 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
0.4%
Race condition in the installation script for Tarantella Enterprise 3 3.01 through 3.20 creates a world-writeable temporary “gunzip” program before executing it, which could allow local users to execute arbitrary commands by modifying the program before it is executed.
Affected configurations
Node
tarantellatarantella_enterpriseMatch3.3.0
ORtarantellatarantella_enterpriseMatch3.3.0.1
ORtarantellatarantella_enterpriseMatch3.3.10
ORtarantellatarantella_enterpriseMatch3.3.11
ORtarantellatarantella_enterpriseMatch3.3.20
6.2 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:H/Au:N/C:C/I:C/A:C
7.6 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
0.4%
Related for CVE-2002-0211