VULNERABILITY INTELLIGENCE

CVE-2002-2323

CVSS score7.5 HIGH
EPSS probability2.21%
CISA KEVNot currently listed
Published2002-12-31
Last modified2026-06-16
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

Sun PC NetLink 1.0 through 1.2 does not properly set the access control list (ACL) for files and directories that use symbolic links and have been restored from backup, which could allow local or remote attackers to bypass intended access restrictions.

Weakness classification

  • CWE-59: Improper Link Resolution Before File Access ('Link Following')
  • CWE-281: Improper Preservation of Permissions

Primary references