CVE-2002-0638
Severity Score
6.2
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
setpwnam.c in the util-linux package, as included in Red Hat Linux 7.3 and earlier, and other operating systems, does not properly lock a temporary file when modifying /etc/passwd, which may allow local users to gain privileges via a complex race condition that uses an open file descriptor in utility programs such as chfn and chsh.
setpwnam.c en el paquete util-linux, como se incluye en Red Hat Linux 7.3 y antieriores, y en otros sistemas operativos, no bloquea adecuadamente un fichero temporal cuando se modifica /etc/passwd, lo que puede permitir a usuarios locales ganar privilegios mediante una compleja condición de carrera que usa un descriptor de fichero abierto en utilidades como chfn y chsh.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2002-06-27 CVE Reserved
- 2002-08-12 CVE Published
- 2024-08-08 CVE Updated
- 2024-08-10 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (15)
| URL | Tag | Source |
|---|---|---|
| http://archives.neohapsis.com/archives/bugtraq/2002-07/0357.html | Mailing List | |
| http://archives.neohapsis.com/archives/bugtraq/2002-07/0396.html | Mailing List | |
| http://marc.info/?l=bugtraq&m=102795787713996&w=2 | Mailing List | |
| http://www.iss.net/security_center/static/9709.php | Vdb Entry | |
| http://www.osvdb.org/5164 | Vdb Entry | |
| http://www.securityfocus.com/bid/5344 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://rhn.redhat.com/errata/RHSA-2002-132.html | 2016-10-18 | |
| http://www.kb.cert.org/vuls/id/405955 | 2016-10-18 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Mandrakesoft Search vendor "Mandrakesoft" | Mandrake Single Network Firewall Search vendor "Mandrakesoft" for product "Mandrake Single Network Firewall" | 7.2 Search vendor "Mandrakesoft" for product "Mandrake Single Network Firewall" and version "7.2" | - |
Affected
| ||||||
| Hp Search vendor "Hp" | Secure Os Search vendor "Hp" for product "Secure Os" | 1.0 Search vendor "Hp" for product "Secure Os" and version "1.0" | linux |
Affected
| ||||||
| Mandrakesoft Search vendor "Mandrakesoft" | Mandrake Linux Search vendor "Mandrakesoft" for product "Mandrake Linux" | 7.0 Search vendor "Mandrakesoft" for product "Mandrake Linux" and version "7.0" | - |
Affected
| ||||||
| Mandrakesoft Search vendor "Mandrakesoft" | Mandrake Linux Search vendor "Mandrakesoft" for product "Mandrake Linux" | 7.1 Search vendor "Mandrakesoft" for product "Mandrake Linux" and version "7.1" | - |
Affected
| ||||||
| Mandrakesoft Search vendor "Mandrakesoft" | Mandrake Linux Search vendor "Mandrakesoft" for product "Mandrake Linux" | 7.2 Search vendor "Mandrakesoft" for product "Mandrake Linux" and version "7.2" | - |
Affected
| ||||||
| Mandrakesoft Search vendor "Mandrakesoft" | Mandrake Linux Search vendor "Mandrakesoft" for product "Mandrake Linux" | 8.0 Search vendor "Mandrakesoft" for product "Mandrake Linux" and version "8.0" | - |
Affected
| ||||||
| Mandrakesoft Search vendor "Mandrakesoft" | Mandrake Linux Search vendor "Mandrakesoft" for product "Mandrake Linux" | 8.0 Search vendor "Mandrakesoft" for product "Mandrake Linux" and version "8.0" | ppc |
Affected
| ||||||
| Mandrakesoft Search vendor "Mandrakesoft" | Mandrake Linux Search vendor "Mandrakesoft" for product "Mandrake Linux" | 8.1 Search vendor "Mandrakesoft" for product "Mandrake Linux" and version "8.1" | - |
Affected
| ||||||
| Mandrakesoft Search vendor "Mandrakesoft" | Mandrake Linux Search vendor "Mandrakesoft" for product "Mandrake Linux" | 8.1 Search vendor "Mandrakesoft" for product "Mandrake Linux" and version "8.1" | ia64 |
Affected
| ||||||
| Mandrakesoft Search vendor "Mandrakesoft" | Mandrake Linux Search vendor "Mandrakesoft" for product "Mandrake Linux" | 8.2 Search vendor "Mandrakesoft" for product "Mandrake Linux" and version "8.2" | - |
Affected
| ||||||
| Mandrakesoft Search vendor "Mandrakesoft" | Mandrake Linux Corporate Server Search vendor "Mandrakesoft" for product "Mandrake Linux Corporate Server" | 1.0.1 Search vendor "Mandrakesoft" for product "Mandrake Linux Corporate Server" and version "1.0.1" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Linux Search vendor "Redhat" for product "Linux" | 6.0 Search vendor "Redhat" for product "Linux" and version "6.0" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Linux Search vendor "Redhat" for product "Linux" | 6.0 Search vendor "Redhat" for product "Linux" and version "6.0" | alpha |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Linux Search vendor "Redhat" for product "Linux" | 6.0 Search vendor "Redhat" for product "Linux" and version "6.0" | sparc |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Linux Search vendor "Redhat" for product "Linux" | 6.1 Search vendor "Redhat" for product "Linux" and version "6.1" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Linux Search vendor "Redhat" for product "Linux" | 6.1 Search vendor "Redhat" for product "Linux" and version "6.1" | alpha |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Linux Search vendor "Redhat" for product "Linux" | 6.1 Search vendor "Redhat" for product "Linux" and version "6.1" | sparc |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Linux Search vendor "Redhat" for product "Linux" | 6.2 Search vendor "Redhat" for product "Linux" and version "6.2" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Linux Search vendor "Redhat" for product "Linux" | 6.2 Search vendor "Redhat" for product "Linux" and version "6.2" | alpha |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Linux Search vendor "Redhat" for product "Linux" | 6.2 Search vendor "Redhat" for product "Linux" and version "6.2" | sparc |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Linux Search vendor "Redhat" for product "Linux" | 7.0 Search vendor "Redhat" for product "Linux" and version "7.0" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Linux Search vendor "Redhat" for product "Linux" | 7.0 Search vendor "Redhat" for product "Linux" and version "7.0" | alpha |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Linux Search vendor "Redhat" for product "Linux" | 7.1 Search vendor "Redhat" for product "Linux" and version "7.1" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Linux Search vendor "Redhat" for product "Linux" | 7.1 Search vendor "Redhat" for product "Linux" and version "7.1" | alpha |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Linux Search vendor "Redhat" for product "Linux" | 7.1 Search vendor "Redhat" for product "Linux" and version "7.1" | ia64 |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Linux Search vendor "Redhat" for product "Linux" | 7.2 Search vendor "Redhat" for product "Linux" and version "7.2" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Linux Search vendor "Redhat" for product "Linux" | 7.2 Search vendor "Redhat" for product "Linux" and version "7.2" | alpha |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Linux Search vendor "Redhat" for product "Linux" | 7.2 Search vendor "Redhat" for product "Linux" and version "7.2" | ia64 |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Linux Search vendor "Redhat" for product "Linux" | 7.3 Search vendor "Redhat" for product "Linux" and version "7.3" | - |
Affected
| ||||||