CVE-2002-1915: Medium severity FreeBSD FreeBSD vulnerability
Published Dec 31, 2002
·Updated
tip on multiple BSD-based operating systems allows local users to cause a denial of service (execution prevention) by using flock() to lock the /var/log/acculog file.
Affected Software
50 affected components
FreeBSD FreeBSD=3.5
FreeBSD FreeBSD=3.5.1
FreeBSD FreeBSD=4.0
FreeBSD FreeBSD=4.1
FreeBSD FreeBSD=4.1.1
FreeBSD FreeBSD=4.2
FreeBSD FreeBSD=4.3
FreeBSD FreeBSD=4.4
FreeBSD FreeBSD=4.5
FreeBSD FreeBSD=4.6
FreeBSD FreeBSD=5.0
NetBSD NetBSD=1.0
NetBSD NetBSD=1.1
NetBSD NetBSD=1.2
NetBSD NetBSD=1.2.1
NetBSD NetBSD=1.3
NetBSD NetBSD=1.3.1
NetBSD NetBSD=1.3.2
NetBSD NetBSD=1.3.3
NetBSD NetBSD=1.4
NetBSD NetBSD=1.4.1
NetBSD NetBSD=1.4.2
NetBSD NetBSD=1.4.3
NetBSD NetBSD=1.5
NetBSD NetBSD=1.5.1
NetBSD NetBSD=1.5.2
OpenBSD OpenBSD=2.0
OpenBSD OpenBSD=2.1
OpenBSD OpenBSD=2.2
OpenBSD OpenBSD=2.3
OpenBSD OpenBSD=2.4
OpenBSD OpenBSD=2.5
OpenBSD OpenBSD=2.6
OpenBSD OpenBSD=2.7
OpenBSD OpenBSD=2.8
OpenBSD OpenBSD=2.9
OpenBSD OpenBSD=3.0
OpenBSD OpenBSD=3.1
FreeBSD FreeBSD=4.1.1-stable
FreeBSD FreeBSD=4.1.1-release
FreeBSD FreeBSD=4.4-stable
FreeBSD FreeBSD=4.6-release
FreeBSD FreeBSD=4.3-stable
FreeBSD FreeBSD=3.5-stable
FreeBSD FreeBSD=4.5-stable
FreeBSD FreeBSD=4.5-release
FreeBSD FreeBSD=4.3-release
FreeBSD FreeBSD=4.2-stable
FreeBSD FreeBSD=3.5.1-stable
FreeBSD FreeBSD=3.5.1-release
Event History
Dec 31, 2002
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
DescriptionSeverityWeaknessAffected Software
Jun 28, 2005
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-1915?
CVE-2002-1915 is classified as a denial of service vulnerability affecting multiple BSD-based operating systems.
2
How do I fix CVE-2002-1915?
To fix CVE-2002-1915, ensure that the /var/log/acculog file is not locked by local users when it is not needed.
3
Which systems are affected by CVE-2002-1915?
CVE-2002-1915 affects various versions of FreeBSD, NetBSD, and OpenBSD operating systems.
4
What impact does CVE-2002-1915 have on system operations?
CVE-2002-1915 can prevent the execution of processes that rely on the /var/log/acculog file.
5
Is there a workaround for CVE-2002-1915?
A potential workaround for CVE-2002-1915 is to adjust permissions on the /var/log/acculog file to restrict access.