CVE-2002-0499

The d_path function in Linux kernel 2.2.20 and earlier, and 2.4.18 and earlier, truncates long pathnames without generating an error, which could allow local users to force programs to perform inappropriate operations on the wrong directories.

CVSS v2.0

2.1 LOWAV:L/AC:L/Au:N/C:N/I:P/A:N

EPSS

0.97% chance of exploitation in the next 30 days, 60th percentile

Published

2002-06-11

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/21353

References

• CVE Record
• NVD entry

Related

• CVE-2002-0495
• CVE-2002-0502
• CVE-2002-0492
• CVE-2002-0504
• CVE-2002-0486
• CVE-2002-0516