Lucene search
HistoryAug 12, 2002 - 4:00 a.m.
CVE-2002-0499
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
AI Score
6.2
Confidence
Low
EPSS
0
Percentile
0.4%
The d_path function in Linux kernel 2.2.20 and earlier, and 2.4.18 and earlier, truncates long pathnames without generating an error, which could allow local users to force programs to perform inappropriate operations on the wrong directories.
Affected configurations
Node
linuxlinux_kernelMatch2.2.0
ORlinuxlinux_kernelMatch2.2.1
ORlinuxlinux_kernelMatch2.2.2
ORlinuxlinux_kernelMatch2.2.3
ORlinuxlinux_kernelMatch2.2.4
ORlinuxlinux_kernelMatch2.2.5
ORlinuxlinux_kernelMatch2.2.6
ORlinuxlinux_kernelMatch2.2.7
ORlinuxlinux_kernelMatch2.2.8
ORlinuxlinux_kernelMatch2.2.9
ORlinuxlinux_kernelMatch2.2.10
ORlinuxlinux_kernelMatch2.2.11
ORlinuxlinux_kernelMatch2.2.12
ORlinuxlinux_kernelMatch2.2.13
ORlinuxlinux_kernelMatch2.2.14
ORlinuxlinux_kernelMatch2.2.15
ORlinuxlinux_kernelMatch2.2.16
ORlinuxlinux_kernelMatch2.2.17
ORlinuxlinux_kernelMatch2.2.18
ORlinuxlinux_kernelMatch2.2.19
ORlinuxlinux_kernelMatch2.2.20
ORlinuxlinux_kernelMatch2.3.0
ORlinuxlinux_kernelMatch2.3.99
ORlinuxlinux_kernelMatch2.4.0
ORlinuxlinux_kernelMatch2.4.1
ORlinuxlinux_kernelMatch2.4.2
ORlinuxlinux_kernelMatch2.4.3
ORlinuxlinux_kernelMatch2.4.4
ORlinuxlinux_kernelMatch2.4.5
ORlinuxlinux_kernelMatch2.4.6
ORlinuxlinux_kernelMatch2.4.7
ORlinuxlinux_kernelMatch2.4.8
ORlinuxlinux_kernelMatch2.4.9
ORlinuxlinux_kernelMatch2.4.10
ORlinuxlinux_kernelMatch2.4.11
ORlinuxlinux_kernelMatch2.4.12
ORlinuxlinux_kernelMatch2.4.13
ORlinuxlinux_kernelMatch2.4.14
ORlinuxlinux_kernelMatch2.4.15
ORlinuxlinux_kernelMatch2.4.16
ORlinuxlinux_kernelMatch2.4.17
ORlinuxlinux_kernelMatch2.4.18
| Vendor | Product | Version | CPE |
|---|---|---|---|
| linux | linux_kernel | 2.2.0 | cpe:2.3:o:linux:linux_kernel:2.2.0:*:*:*:*:*:*:* |
| linux | linux_kernel | 2.2.1 | cpe:2.3:o:linux:linux_kernel:2.2.1:*:*:*:*:*:*:* |
| linux | linux_kernel | 2.2.2 | cpe:2.3:o:linux:linux_kernel:2.2.2:*:*:*:*:*:*:* |
| linux | linux_kernel | 2.2.3 | cpe:2.3:o:linux:linux_kernel:2.2.3:*:*:*:*:*:*:* |
| linux | linux_kernel | 2.2.4 | cpe:2.3:o:linux:linux_kernel:2.2.4:*:*:*:*:*:*:* |
| linux | linux_kernel | 2.2.5 | cpe:2.3:o:linux:linux_kernel:2.2.5:*:*:*:*:*:*:* |
| linux | linux_kernel | 2.2.6 | cpe:2.3:o:linux:linux_kernel:2.2.6:*:*:*:*:*:*:* |
| linux | linux_kernel | 2.2.7 | cpe:2.3:o:linux:linux_kernel:2.2.7:*:*:*:*:*:*:* |
| linux | linux_kernel | 2.2.8 | cpe:2.3:o:linux:linux_kernel:2.2.8:*:*:*:*:*:*:* |
| linux | linux_kernel | 2.2.9 | cpe:2.3:o:linux:linux_kernel:2.2.9:*:*:*:*:*:*:* |
Related
exploitdb
exploitdb
Linux Kernel 2.2.x/2.3/2.4.x - 'd_path()' Path Truncation
2002-03-26 00:00:00
cvelist
cvelist
CVE-2002-0499
2002-06-11 04:00:00
cve
cve
CVE-2002-0499
2002-08-12 04:00:00
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
AI Score
6.2
Confidence
Low
EPSS
0
Percentile
0.4%
Related for NVD:CVE-2002-0499