VULNERABILITY INTELLIGENCE

CVE-2002-0499

CVSS score2.1 LOW

EPSS probability0.97%

CISA KEVNot currently listed

Published2002-08-12

Last modified2026-06-16

Description

The d_path function in Linux kernel 2.2.20 and earlier, and 2.4.18 and earlier, truncates long pathnames without generating an error, which could allow local users to force programs to perform inappropriate operations on the wrong directories.