CVE-2002-0211: Race Condition
Race condition in the installation script for Tarantella Enterprise 3 3.01 through 3.20 creates a world-writeable temporary "gunzip" program before executing it, which could allow local users to execute arbitrary commands by modifying the program before it is executed.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0211?
CVE-2002-0211 is considered to have a medium severity due to the potential for local users to execute arbitrary commands.
How do I fix CVE-2002-0211?
To fix CVE-2002-0211, ensure that the Tarantella Enterprise installation script is appropriately secured to prevent unauthorized modifications.
Which versions of Tarantella Enterprise are affected by CVE-2002-0211?
CVE-2002-0211 affects Tarantella Enterprise versions 3.3.0 through 3.3.20.
What type of attack is possible with CVE-2002-0211?
CVE-2002-0211 enables local users to execute arbitrary commands via a race condition in the installation script.
Is there a workaround for CVE-2002-0211?
A suggested workaround for CVE-2002-0211 is to restrict access to the installation script to trusted users only.