CVE-2002-1737

LowCVSS 2.1/10Last modified Jun 16, 2026

Description

Astaro Security Linux 2.016 creates world-writable files and directories, which allows local users to overwrite arbitrary files.

Metrics

CVSS 2.0 2.1/10AV:L/AC:L/Au:N/C:N/I:P/A:N

Affected software

No affected versions have been published.

Timeline

Published
Dec 31, 2002
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2002

CVE-2002-17385.0Alt-N Technologies MDaemon 5.0.5.0 and earlier creates a default MDaemon mail account with a password of MServer, which could allow remote aCVE-2002-17395.5Alt-N Technologies Mdaemon 5.0 through 5.0.6 uses a weak encryption algorithm to store user passwords, which allows local users to crack pasCVE-2002-17402.1Buffer overflow in WorldClient.cgi in WorldClient in Alt-N Technologies MDaemon 5.0.5.0 and earlier allows local users to execute arbitrary CVE-2002-17417.2Directory traversal vulnerability in WorldClient.cgi in WorldClient for Alt-N Technologies MDaemon 5.0.5.0 and earlier allows local users toCVE-2002-17425.0SOAP::Lite 0.50 through 0.52 allows remote attackers to load arbitrary Perl functions by suppling a non-existent function in a script using CVE-2002-17435.0AOL ICQ 2002a Build 3722 allows remote attackers to cause a denial of service (crash) via a malformed .hpf file.CVE-2002-17445.0Directory traversal vulnerability in CodeBrws.asp in Microsoft IIS 5.0 allows remote attackers to view source code and determine the existenCVE-2002-17457.5Off-by-one error in the CodeBrws.asp sample script in Microsoft IIS 5.0 allows remote attackers to view the source code for files with extenCVE-2002-17465.0Vtun 2.5b1 allows remote attackers to inject data into user sessions by sniffing and replaying packets.CVE-2002-17475.0Vtun 2.5b1 does not authenticate forwarded packets, which allows remote attackers to inject data into user sessions without detection, and pCVE-2002-17487.2Unknown vulnerability in Slash 2.1.x and 2.2 through 2.2.2, as used in Slashcode, allows remote authenticated users to gain access to arbitrCVE-2002-17497.2Windows 2000 Terminal Services, when using the disconnect feature of the client, does not properly lock itself if it is left idle until the
CVE-2002-1737: Low severity, CVSS 2.1 | Vulnix