CVE-2002-0499

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2002-08-12 · updated 2026-06-16

Description

The d_path function in Linux kernel 2.2.20 and earlier, and 2.4.18 and earlier, truncates long pathnames without generating an error, which could allow local users to force programs to perform inappropriate operations on the wrong directories.

Affected products

Linux kernel: 2.2.0, 2.2.1, 2.2.2, 2.2.3, 2.2.4, 2.2.5 (+36)

References

http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0074.html
http://www.cs.helsinki.fi/linux/linux-kernel/2002-13/0054.html
http://www.iss.net/security_center/static/8634.php
http://www.securityfocus.com/archive/1/264117
http://www.securityfocus.com/bid/4367
http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0074.html
http://www.cs.helsinki.fi/linux/linux-kernel/2002-13/0054.html
http://www.iss.net/security_center/static/8634.php
http://www.securityfocus.com/archive/1/264117
http://www.securityfocus.com/bid/4367

Get alerted when CVE-2002-0499 or the next vulnerability affects your stack