Vulnerability in Linux Kernel
CVE-2002-0499
The d_path function in Linux kernel 2.2.20 and earlier, and 2.4.18 and earlier, truncates long pathnames without generating an error, which could allow local users to force programs to perform inappropriate operations on the wrong directories.
EPSS: 0.010 (58.4th percentile) — read the EPSS interpretation.
Affected products
- Linux Linux_kernel — versions 2.2.0, 2.2.1, 2.2.2
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_VULNWATCH)
- cve@mitre.org (vdb-entry, Vendor Advisory, x_refsource_XF)
- cve@mitre.org (Exploit, vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ)