CVE-2002-1502

LowCVSS 2.1/10Last modified Jun 16, 2026

Description

Symbolic link vulnerability in xbreaky before 0.5.5 allows local users to overwrite arbitrary files via a symlink from the user's .breakyhighscores file to the target file.

Metrics

CVSS 2.0 2.1/10AV:L/AC:L/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2002-09/0131.htmlExploit, Vendor Advisory
http://www.iss.net/security_center/static/10078.phpVendor Advisory
http://www.securityfocus.com/bid/5700Patch, Vendor Advisory
http://xbreaky.sourceforge.net/Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2002-09/0131.htmlExploit, Vendor Advisory
http://www.iss.net/security_center/static/10078.phpVendor Advisory
http://www.securityfocus.com/bid/5700Patch, Vendor Advisory
http://xbreaky.sourceforge.net/Vendor Advisory

Timeline

Published: Apr 2, 2003
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-15037.2Buffer overflow in Automatic File Distributor (AFD) 1.2.14 and earlier allows local users to gain privileges via a long MON_WORK_DIR environ CVE-2002-15045.0Directory traversal vulnerability in WebServer 4 Everyone 1.22 allows remote attackers to read arbitrary files via "..\" (dot-dot backslash)CVE-2002-15057.5SQL injection vulnerability in board.php for WoltLab Burning Board (wBB) 2.0 RC 1 and earlier allows remote attackers to modify the database CVE-2002-15067.2Buffer overflow in Linuxconf before 1.28r4 allows local users to execute arbitrary code via a long LINUXCONF_LANG environment variable, whic CVE-2002-15075.0Unreal Tournament 2003 (ut2003) clients and servers allow remote attackers to cause a denial of service via malformed messages containing a CVE-2002-15081.2slapd in OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allows local users to overwrite arbitrary files via a race condition during the creation o CVE-2002-15093.6A patch for shadow-utils 20000902 causes the useradd command to create a mail spool files with read/write privileges of the new user's group CVE-2002-151010.0xdm, with the authComplain variable set to false, allows arbitrary attackers to connect to the X server if the xdm auth directory does not e CVE-2002-15115.0The vncserver wrapper for vnc before 3.3.3r2-21 uses the rand() function instead of srand(), which causes vncserver to generate weak cookies CVE-2002-15126.2xbru in BRU Workstation 17.0 allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the xbru_dsche CVE-2002-15134.6The UCX POP server in HP TCP/IP services for OpenVMS 4.2 through 5.3 allows local users to truncate arbitrary files via the -logfile command CVE-2002-15147.2gds_lock_mgr in Borland InterBase allows local users to overwrite files and gain privileges via a symlink attack on a "isc_init1.X" temporar