CVE-2002-0137

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

CDRDAO 1.1.4 and 1.1.5 allows local users to overwrite arbitrary files via a symlink attack on the $HOME/.cdrdao configuration file.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published
Mar 25, 2002
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2002

CVE-2002-01382.1CDRDAO 1.1.4 and 1.1.5 allows local users to read arbitrary files via the show-data command.CVE-2002-01397.5Pi-Soft SpoonFTP 1.1 and earlier allows remote attackers to redirect traffic to other sites (aka FTP bounce) via the PORT command.CVE-2002-01407.5Domain Name Relay Daemon (dnrd) 2.10 and earlier allows remote malicious DNS sites to cause a denial of service and possibly execute arbitraCVE-2002-01411.2Maelstrom GPL 3.0.1 allows local users to overwrite arbitrary files of other Maelstrom users via a symlink attack on the /tmp/f file.CVE-2002-01427.5CGI handler in John Roy Pi3Web for Windows 2.0 beta 1 and 2 allows remote attackers to cause a denial of service (crash) via a series of reqCVE-2002-01434.6Buffer overflow in Eterm of Enlightenment Imlib2 1.0.4 and earlier allows local users to execute arbitrary code via a long HOME environment CVE-2002-01447.5Directory traversal vulnerability in chuid 1.2 and earlier allows remote attackers to change the ownership of files outside of the upload diCVE-2002-01457.5chuid 1.2 and earlier does not properly verify the ownership of files that will be changed, which allows remote attackers to change files owCVE-2002-01465.0fetchmail email client before 5.9.10 does not properly limit the maximum number of messages available, which allows a remote IMAP server to CVE-2002-01477.5Buffer overflow in the ASP data transfer mechanism in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to cause aCVE-2002-01487.5Cross-site scripting vulnerability in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary scriptCVE-2002-01497.5Buffer overflow in ASP Server-Side Include Function in IIS 4.0, 5.0 and 5.1 allows remote attackers to cause a denial of service and possibl
CVE-2002-0137: High severity, CVSS 7.2 | Vulnix