Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2002-0638
HistoryAug 12, 2002 - 4:00 a.m.

CVE-2002-0638

2002-08-1204:00:00
NVD-CWE-Other
[email protected]
web.nvd.nist.gov
27
cve-2002-0638
util-linux
red hat linux 7.3
local privilege escalation
race condition
security vulnerability

6.6 Medium

AI Score

Confidence

Low

6.2 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

71.7%

JSON

setpwnam.c in the util-linux package, as included in Red Hat Linux 7.3 and earlier, and other operating systems, does not properly lock a temporary file when modifying /etc/passwd, which may allow local users to gain privileges via a complex race condition that uses an open file descriptor in utility programs such as chfn and chsh.

Related

securityvulns 1
nessus 2
cert 1
securityvulns
securityvulns
RAZOR advisory: Linux util-linux chfn local root vulnerability
2002-07-31 00:00:00
nessus
nessus
Mandrake Linux Security Advisory : util-linux (MDKSA-2002:047)
2004-07-31 00:00:00
RHEL 2.1 : util-linux (RHSA-2002:137)
2004-07-06 00:00:00
cert
cert
util-linux package vulnerable to privilege escalation when "ptmptmp" file is not removed properly when using "chfn" utility
2002-07-29 00:00:00

6.6 Medium

AI Score

Confidence

Low

6.2 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

71.7%

JSON
Related for CVE-2002-0638
securityvulns1nessus2cert1