First published: Wed Oct 16 2002(Updated: )
JFS (JFS3.1 and OnlineJFS) in HP-UX 10.20, 11.00, and 11.04 does not properly implement the sticky bit functionality, which could allow attackers to bypass intended restrictions on filesystems.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Hp Jfs | =3.1 | |
HPE HP-UX | =11.04 | |
HPE HP-UX | =11.00 | |
HPE HP-UX | =10.20 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2002-1618 is considered a moderate severity vulnerability due to its potential for unauthorized access.
To fix CVE-2002-1618, update to a patched version of JFS or HP-UX that properly implements the sticky bit functionality.
CVE-2002-1618 affects JFS versions 3.1 and HP-UX versions 10.20, 11.00, and 11.04.
The risk of CVE-2002-1618 includes the potential for attackers to bypass filesystem restrictions and manipulate files.
CVE-2002-1618 may still pose a concern for organizations using outdated versions of HP-UX or JFS that have not been patched.