CVE

Id
4827  
CVE No.
CVE-2002-0435  
Status
Entry  
Description
Race condition in the recursive (1) directory deletion and (2) directory move in GNU File Utilities (fileutils) 4.1 and earlier allows local users to delete directories as the user running fileutils by moving a low-level directory to a higher level as it is being deleted, which causes fileutils to chdir to a ".." directory that is higher than expected, possibly up to the root file system.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
24642 4827 CVE-2002-0435 BUGTRAQ:20020310 GNU fileutils - recursive directory removal race condition  View
24643 4827 CVE-2002-0435 URL:http://www.securityfocus.com/archive/1/260936  View
24644 4827 CVE-2002-0435 CONFIRM:http://mail.gnu.org/archive/html/bug-fileutils/2002-03/msg00028.html  View
24645 4827 CVE-2002-0435 CALDERA:CSSA-2002-018.1  View
24646 4827 CVE-2002-0435 URL:ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-018.1.txt  View
24647 4827 CVE-2002-0435 REDHAT:RHSA-2003:015  View
24648 4827 CVE-2002-0435 URL:http://www.redhat.com/support/errata/RHSA-2003-015.html  View
24649 4827 CVE-2002-0435 REDHAT:RHSA-2003:016  View
24650 4827 CVE-2002-0435 URL:http://www.redhat.com/support/errata/RHSA-2003-016.html  View
24651 4827 CVE-2002-0435 XF:gnu-fileutils-race-condition(8432)  View
24652 4827 CVE-2002-0435 URL:http://www.iss.net/security_center/static/8432.php  View
24653 4827 CVE-2002-0435 BID:4266  View
24654 4827 CVE-2002-0435 URL:http://www.securityfocus.com/bid/4266  View
24655 4827 CVE-2002-0435 MANDRAKE:MDKSA-2002:031  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63728 JVNDB-2002-000055 GNU fileutils の rm と mv コマンドにおける競合状態の脆弱性 GNU fileutils に含まれている rm コマンドと mv コマンドは、ロック機構が不完全であり、また、不適切に chroot() 関数が利用されているため、競合状態 (race condition) が発生する脆弱性が存在します。 CVE-2002-0435 4827 1.2 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000055.html  View