CVE-2002-0499: Low severity Linux Linux kernel vulnerability
The dpath function in Linux kernel 2.2.20 and earlier, and 2.4.18 and earlier, truncates long pathnames without generating an error, which could allow local users to force programs to perform inappropriate operations on the wrong directories.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0499?
CVE-2002-0499 has a medium severity rating due to its potential for local users to exploit path truncation vulnerabilities.
How do I fix CVE-2002-0499?
To fix CVE-2002-0499, upgrade the Linux kernel to version 2.4.19 or later.
What systems are affected by CVE-2002-0499?
CVE-2002-0499 affects Linux kernel versions 2.2.20 and earlier, as well as 2.4.18 and earlier.
Who can exploit CVE-2002-0499?
Local users can exploit CVE-2002-0499 by leveraging the truncation of long pathnames to performs unauthorized operations.
What is the impact of CVE-2002-0499?
The impact of CVE-2002-0499 can lead to programs operating on incorrect directories without error reporting.