← All advisories

Unrated severityNVD Advisory· Published Dec 31, 2002· Updated Jun 16, 2026

CVE-2002-2382

CVE-2002-2382

Description

cvsupd.sh in CVSup 1.2 allows local users to overwrite arbitrary files and gain privileges via a symlink attack on /var/tmp/cvsupd.out.

Affected products

2

Cvsup/Cvsup2 versions
cpe:2.3:a:cvsup:cvsup:1.2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:cvsup:cvsup:1.2:*:*:*:*:*:*:*
- (no CPE)range: =1.2

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.