Lucene search

K
cve[email protected]CVE-2002-0435
HistoryJul 26, 2002 - 4:00 a.m.

CVE-2002-0435

2002-07-2604:00:00
NVD-CWE-Other
web.nvd.nist.gov
22
gnu file utilities
cve-2002-0435
race condition
directory deletion
unauthorized access

6.3 Medium

AI Score

Confidence

Low

1.2 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:H/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

5.2%

Race condition in the recursive (1) directory deletion and (2) directory move in GNU File Utilities (fileutils) 4.1 and earlier allows local users to delete directories as the user running fileutils by moving a low-level directory to a higher level as it is being deleted, which causes fileutils to chdir to a โ€œโ€ฆโ€ directory that is higher than expected, possibly up to the root file system.

6.3 Medium

AI Score

Confidence

Low

1.2 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:H/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

5.2%