NVD

Id
79638  
Name
CVE-2002-0638  
Description
setpwnam.c in the util-linux package, as included in Red Hat Linux 7.3 and earlier, and other operating systems, does not properly lock a temporary file when modifying /etc/passwd, which may allow local users to gain privileges via a complex race condition that uses an open file descriptor in utility programs such as chfn and chsh.  
Reject
 
CVSS Version
2  
CVSS Score
6.2  
Severity
Medium  
CVSS Base Score
6.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-05  
Published
2002-08-12  
Modified Date
2016-10-17  
Seq
2002-0638  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
397221 79638 CVE-2002-0638 CSSA-2002-043.0  View
397222 79638 CVE-2002-0638 20020729 [VulnWatch] RAZOR advisory: Linux util-linux chfn local root vulnerability  View
397223 79638 CVE-2002-0638 20020730 TSLSA-2002-0064 - util-linux  View
397224 79638 CVE-2002-0638 CLA-2002:523  View
397225 79638 CVE-2002-0638 20020729 RAZOR advisory: Linux util-linux chfn local root vulnerability  View
397226 79638 CVE-2002-0638 HPSBTL0207-054  View
397227 79638 CVE-2002-0638 RHSA-2002:132  View
397228 79638 CVE-2002-0638 utillinux-chfn-race-condition(9709)  View
397229 79638 CVE-2002-0638 VU#405955  View
397230 79638 CVE-2002-0638 MDKSA-2002:047  View
397231 79638 CVE-2002-0638 RHSA-2002:137  View
397232 79638 CVE-2002-0638 5344  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63843 JVNDB-2002-000170 複数ベンダの util-linux パッケージにおける権限昇格の脆弱性 Sun Cobalt RaQ、及び Red Hat Linux の util-linux パッケージには、chfn 、chshコマンドの実行コードである util-linux/setpwnam.c 内のファイルロックシステムの実装に不備があるため、競合状態を発生してしまう脆弱性が存在します。 CVE-2002-0638 5028 CVE-2002-0638 79638 6.2 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000170.html 2002-07-29 2007-04-01 View