1.2

CVE-2002-0435

EPSS 0.07%
Published 26.07.2002 04:00:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

Race condition in the recursive (1) directory deletion and (2) directory move in GNU File Utilities (fileutils) 4.1 and earlier allows local users to delete directories as the user running fileutils by moving a low-level directory to a higher level as it is being deleted, which causes fileutils to chdir to a ".." directory that is higher than expected, possibly up to the root file system.

Affected products Warnungen 0 Metrics 2 CWE 0 References 11

Data is provided by the National Vulnerability Database (NVD)

Gnu ≫ Fileutils Version4.0

Gnu ≫ Fileutils Version4.1

Gnu ≫ Fileutils Version4.1.6

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.07%	0.194

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	1.2	1.9	2.9	AV:L/AC:H/Au:N/C:N/I:P/A:N

ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-018.1.txt

Patch

Vendor Advisory

http://mail.gnu.org/archive/html/bug-fileutils/2002-03/msg00028.html

http://www.iss.net/security_center/static/8432.php

Patch

Vendor Advisory

http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-031.php

http://www.redhat.com/support/errata/RHSA-2003-015.html

http://www.redhat.com/support/errata/RHSA-2003-016.html

http://www.securityfocus.com/archive/1/260936

Vendor Advisory

http://www.securityfocus.com/bid/4266

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2002-0435

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2002-0435

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2002-0435

EUVD