Vulnerability in Cvsup

CVE-2002-2382

cvsupd.sh in CVSup 1.2 allows local users to overwrite arbitrary files and gain privileges via a symlink attack on /var/tmp/cvsupd.out.

EPSS: 0.003 (23.4th percentile) — read the EPSS interpretation.

Affected products

  • Cvsup — versions 1.2
  • N/a — versions n/a

Weakness classification (CWE)

References