CVE-2002-0157

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

Nautilus 1.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on the .nautilus-metafile.xml metadata file.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://online.securityfocus.com/archive/1/270691/2002-04-29/2002-05-05/0Patch, Vendor Advisory
http://www.iss.net/security_center/static/8995.php
http://www.redhat.com/support/errata/RHSA-2002-064.html
http://www.securityfocus.com/bid/4373Patch, Vendor Advisory
http://online.securityfocus.com/archive/1/270691/2002-04-29/2002-05-05/0Patch, Vendor Advisory
http://www.iss.net/security_center/static/8995.php
http://www.redhat.com/support/errata/RHSA-2002-064.html
http://www.securityfocus.com/bid/4373Patch, Vendor Advisory

Timeline

Published: May 16, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-01587.2Buffer overflow in Xsun on Solaris 2.6 through 8 allows local users to gain root privileges via a long -co (color database) command line arg CVE-2002-01597.5Format string vulnerability in the administration function in Cisco Secure Access Control Server (ACS) for Windows, 2.6.x and earlier and 3.CVE-2002-01605.0The administration function in Cisco Secure Access Control Server (ACS) for Windows, 2.6.x and earlier and 3.x through 3.01 (build 40), allo CVE-2002-01626.2LogWatch before 2.5 allows local users to execute arbitrary code via a symlink attack on the logwatch temporary directory.CVE-2002-01637.5Heap-based buffer overflow in Squid before 2.4 STABLE4, and Squid 2.5 and 2.6 until March 12, 2002 distributions, allows remote attackers to CVE-2002-01644.6Vulnerability in the MIT-SHM extension of the X server on Linux (XFree86) 4.2.1 and earlier allows local users to read and write arbitrary s CVE-2002-01657.2LogWatch 2.5 allows local users to gain root privileges via a symlink attack, a different vulnerability than CVE-2002-0162.CVE-2002-01667.5Cross-site scripting vulnerability in analog before 5.22 allows remote attackers to execute Javascript via an HTTP request containing the sc CVE-2002-01677.5Imlib before 1.9.13 sometimes uses the NetPBM package to load trusted images, which could allow attackers to cause a denial of service (cras CVE-2002-01687.5Vulnerability in Imlib before 1.9.13 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code by manipulati CVE-2002-01694.6The default stylesheet for DocBook on Red Hat Linux 6.2 through 7.2 is installed with an insecure option enabled, which could allow users to CVE-2002-01707.5Zope 2.2.0 through 2.5.1 does not properly verify the access for objects with proxy roles, which could allow some users to access documents