CVEvulnerability
CVE-2002-0499
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2002-08-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N
Description
The d_path function in Linux kernel 2.2.20 and earlier, and 2.4.18 and earlier, truncates long pathnames without generating an error, which could allow local users to force programs to perform inappropriate operations on the wrong directories.
Affected configurations
• linux linux kernel 2.2.0
• linux linux kernel 2.2.1
• linux linux kernel 2.2.2
• linux linux kernel 2.2.3
• linux linux kernel 2.2.4
• linux linux kernel 2.2.5
• linux linux kernel 2.2.6
• linux linux kernel 2.2.7
• linux linux kernel 2.2.8
• linux linux kernel 2.2.9
• linux linux kernel 2.2.10
• linux linux kernel 2.2.11
• linux linux kernel 2.2.12
• linux linux kernel 2.2.13
• linux linux kernel 2.2.14
• linux linux kernel 2.2.15
• linux linux kernel 2.2.16
• linux linux kernel 2.2.17
• linux linux kernel 2.2.18
• linux linux kernel 2.2.19
• linux linux kernel 2.2.20
• linux linux kernel 2.3.0
• linux linux kernel 2.3.99
• linux linux kernel 2.4.0
• linux linux kernel 2.4.1
• linux linux kernel 2.4.2
• linux linux kernel 2.4.3
• linux linux kernel 2.4.4
• linux linux kernel 2.4.5
• linux linux kernel 2.4.6
• linux linux kernel 2.4.7
• linux linux kernel 2.4.8
• linux linux kernel 2.4.9
• linux linux kernel 2.4.10
• linux linux kernel 2.4.11
• linux linux kernel 2.4.12
• linux linux kernel 2.4.13
• linux linux kernel 2.4.14
• linux linux kernel 2.4.15
• linux linux kernel 2.4.16
• linux linux kernel 2.4.17
• linux linux kernel 2.4.18
Related
Referenced by CWE · observed example (1)
- CWE-392 Missing Report of Error Condition weakness
References
- http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0074.html archives.neohapsis.com
- http://www.cs.helsinki.fi/linux/linux-kernel/2002-13/0054.html www.cs.helsinki.fi
- http://www.iss.net/security_center/static/8634.php Vendor Advisory
- http://www.securityfocus.com/archive/1/264117 Vendor Advisory
- http://www.securityfocus.com/bid/4367 Exploit, Vendor Advisory
- http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0074.html archives.neohapsis.com
- http://www.cs.helsinki.fi/linux/linux-kernel/2002-13/0054.html www.cs.helsinki.fi
- http://www.iss.net/security_center/static/8634.php Vendor Advisory
- http://www.securityfocus.com/archive/1/264117 Vendor Advisory
- http://www.securityfocus.com/bid/4367 Exploit, Vendor Advisory