CVE-2002-0105

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

CDE dtlogin in Caldera UnixWare 7.1.0, and possibly other operating systems, allows local users to gain privileges via a symlink attack on /var/dt/Xerrors since /var/dt is world-writable.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=101060400802428&w=2
http://www.iss.net/security_center/static/7864.phpVendor Advisory
http://www.securityfocus.com/bid/3818Vendor Advisory
http://marc.info/?l=bugtraq&m=101060400802428&w=2
http://www.iss.net/security_center/static/7864.phpVendor Advisory
http://www.securityfocus.com/bid/3818Vendor Advisory

Timeline

Published: Mar 25, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-01065.0BEA Systems Weblogic Server 6.1 allows remote attackers to cause a denial of service via a series of requests to .JSP files that contain an CVE-2002-01075.0Web administration interface in CacheFlow CacheOS 4.0.13 and earlier allows remote attackers to obtain sensitive information via a series of CVE-2002-01087.5Allaire Forums 2.0.4 and 2.0.5 and Forums! 3.0 and 3.1 allows remote authenticated users to spoof messages as other users by modifying the h CVE-2002-01096.4Linksys EtherFast BEFN2PS4, BEFSR41, and BEFSR81 Routers, and possibly other products, allow remote attackers to gain sensitive information CVE-2002-01102.1Nevrona Designs MiraMail 1.04 and earlier stores authentication information such as POP usernames and passwords in plaintext in a .ini file,CVE-2002-01117.5Directory traversal vulnerability in Funsoft Dino's Webserver 1.2 and earlier allows remote attackers to read files or execute arbitrary com CVE-2002-01125.0Etype Eserv 2.97 allows remote attackers to view password protected files via /./ in the URL.CVE-2002-01134.6EMC NetWorker (formerly Legato NetWorker) before 7.0 stores log files in the /nsr/logs/ directory with world-readable permissions, which all CVE-2002-01144.6EMC NetWorker (formerly Legato NetWorker) before 7.0 stores passwords in plaintext in the daemon.log file, which allows local users to gain CVE-2002-01155.0Snort 1.8.3 does not properly define the minimum ICMP header size, which allows remote attackers to cause a denial of service (crash and cor CVE-2002-01165.0Palm OS 3.5h and possibly other versions, as used in Handspring Visor and Xircom products, allows remote attackers to cause a denial of serv CVE-2002-01177.5Cross-site scripting vulnerability in Yet Another Bulletin Board (YaBB) 1 Gold SP 1 and earlier allows remote attackers to execute arbitrary