CVE-2002-0875

Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the names of files whose access is restricted to the root group.

CVSS v2.0 2.1 LOW

2.1^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://www.debian.org/security/2002/dsa-154	Patch Vendor Advisory
ftp://patches.sgi.com/support/free/security/advisories/20000301-03-I
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc
http://www.redhat.com/support/errata/RHSA-2005-005.html
http://www.securityfocus.com/bid/5487
http://www.iss.net/security_center/static/9880.php

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:sgi:fam:2.6.6:::::::*
	cpe:2.3:a:sgi:fam:2.6.8:::::::*
	cpe:2.3:o:sgi:irix:6.5.15:::::::*
	cpe:2.3:o:sgi:irix:6.5.16:::::::*
	cpe:2.3:o:sgi:irix:6.5.17:::::::*

Configuration 2 (hide)

cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*

Information

Published : 2002-09-05 04:00

Updated : 2008-09-10 19:13

NVD link : CVE-2002-0875

Mitre link : CVE-2002-0875

JSON object : View

Products Affected

sgi

irix
fam

debian

debian_linux

CWE

NVD-CWE-Other

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.debian.org/security/2002/dsa-154", "name": "DSA-154", "tags": ["Patch", "Vendor Advisory"], "refsource": "DEBIAN"}, {"url": "ftp://patches.sgi.com/support/free/security/advisories/20000301-03-I", "name": "20000301-03-I", "tags": [], "refsource": "SGI"}, {"url": "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc", "name": "FreeBSD-SN-02:05", "tags": [], "refsource": "FREEBSD"}, {"url": "http://www.redhat.com/support/errata/RHSA-2005-005.html", "name": "RHSA-2005:005", "tags": [], "refsource": "REDHAT"}, {"url": "http://www.securityfocus.com/bid/5487", "name": "5487", "tags": [], "refsource": "BID"}, {"url": "http://www.iss.net/security_center/static/9880.php", "name": "sgi-fam-insecure-permissions(9880)", "tags": [], "refsource": "XF"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the names of files whose access is restricted to the root group."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2002-0875", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "severity": "LOW", "impactScore": 2.9, "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2002-09-05T04:00Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:sgi:fam:2.6.6:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:sgi:fam:2.6.8:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:sgi:irix:6.5.15:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:sgi:irix:6.5.16:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:sgi:irix:6.5.17:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2008-09-10T19:13Z"}