CVE-2002-0499 in Kernel

Sumário (Inglês)

The d_path function in Linux kernel 2.2.20 and earlier, and 2.4.18 and earlier, truncates long pathnames without generating an error, which could allow local users to force programs to perform inappropriate operations on the wrong directories.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Divulgação

12/08/2002

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
18555	Linux Kernel Directory Name d_path Elevação de Privilégios	269	Prova de conceito	Não definido	CVE-2002-0499

Fontes

• MITRE
• NVD
• CVE Details