VULNERABILITY INTELLIGENCE

CVE-2002-2382

CVSS score7.2 HIGH

EPSS probability0.31%

CISA KEVNot currently listed

Published2002-12-31

Last modified2026-06-16

Description

cvsupd.sh in CVSup 1.2 allows local users to overwrite arbitrary files and gain privileges via a symlink attack on /var/tmp/cvsupd.out.