Resource management errors in Linux kernel - CVE-2002-0499
Published: August 12, 2002 / Updated: August 9, 2024
Vulnerability identifier: #VU95665
CSH Severity: Low
CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2002-0499
CWE-ID: CWE-399
Exploitation vector: Local access
Exploit availability:
Public exploit is available
Vulnerability details
The vulnerability allows a local user to corrupt data.
The d_path function in Linux kernel 2.2.20 and earlier, and 2.4.18 and earlier, truncates long pathnames without generating an error, which could allow local users to force programs to perform inappropriate operations on the wrong directories.
Affected software
Linux kernel
How to mitigate CVE-2002-0499
Install update from vendor's repository.