NVD

Id
79505  
Name
CVE-2002-0499  
Description
The d_path function in Linux kernel 2.2.20 and earlier, and 2.4.18 and earlier, truncates long pathnames without generating an error, which could allow local users to force programs to perform inappropriate operations on the wrong directories.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-05  
Published
2002-08-12  
Modified Date
2008-09-05  
Seq
2002-0499  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
396669 79505 CVE-2002-0499 20020326 [VulnWatch] d_path() truncating excessive long path name vulnerability  View
396670 79505 CVE-2002-0499 http://www.cs.helsinki.fi/linux/linux-kernel/2002-13/0054.html  View
396671 79505 CVE-2002-0499 linux-dpath-truncate-path(8634)  View
396672 79505 CVE-2002-0499 20020326 d_path() truncating excessive long path name vulnerability  View
396673 79505 CVE-2002-0499 4367  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63740 JVNDB-2002-000067 Linux Kernel の d_path() 関数における任意のディレクトリを参照される脆弱性 Linux Kernel において、dentry が PAGE_SIZE -1 よりも長いパスを受け取った場合に、d_path は連結したパスをバッファに書き込まず、不完全なパスを含むエラーメッセージをユーザ空間プロセスに返す脆弱性が存在します。 CVE-2002-0499 4891 CVE-2002-0499 79505 2.1 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000067.html 2002-03-26 2007-04-01 View