low2.1Public exploit code
CVE-2002-0499
The d_path function in Linux kernel 2.2.20 and earlier, and 2.4.18 and earlier, truncates long pathnames without generating an error, which could allow local u…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Linux Kernel 2.2.x/2.3/2.4.x - 'd_path()' Path Truncation2002-03-26 · local · linux · Verified
Impact
The d_path function in Linux kernel 2.2.20 and earlier, and 2.4.18 and earlier, truncates long pathnames without generating an error, which could allow local users to force programs to perform inappropriate operations on the wrong directories.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linux | Linux Kernel | Versions 2.2.0, 2.2.1, 2.2.2, 2.2.3, 2.2.4, 2.2.5 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0074.html
- http://www.cs.helsinki.fi/linux/linux-kernel/2002-13/0054.html
- http://www.iss.net/security_center/static/8634.php
- http://www.securityfocus.com/archive/1/264117
- http://www.securityfocus.com/bid/4367
- http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0074.html
- http://www.cs.helsinki.fi/linux/linux-kernel/2002-13/0054.html
- http://www.iss.net/security_center/static/8634.php
- http://www.securityfocus.com/archive/1/264117
- http://www.securityfocus.com/bid/4367