CVE-2002-0211

Published: May 16, 2002Modified: Apr 16, 2026

6.2

Vector

AV:L/AC:H/Au:N/C:C/I:C/A:C

Exploitability: 1.9 / Impact: 10.0

Source: NVD

Description

Race condition in the installation script for Tarantella Enterprise 3 3.01 through 3.20 creates a world-writeable temporary "gunzip" program before executing it, which could allow local users to execute arbitrary commands by modifying the program before it is executed.

Affected (5)

Products: Tarantella: Tarantella Enterprise

1 product

Tarantella Enterprise

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Tarantella Tarantella Enterprise	Version 3.3.0.1
Tarantella Tarantella Enterprise	Version 3.3.0
Tarantella Tarantella Enterprise	Version 3.3.10
Tarantella Tarantella Enterprise	Version 3.3.11
Tarantella Tarantella Enterprise	Version 3.3.20

References (10)

http://marc.info/?l=bugtraq&m=101208650722179&w=2

Source: cve@mitre.org

http://online.securityfocus.com/archive/1/265845

Source: cve@mitre.org

Exploit

http://www.iss.net/security_center/static/7996.php

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/bid/3966

Source: cve@mitre.org

http://www.tarantella.com/security/bulletin-04.html

Source: cve@mitre.org

PatchVendor AdvisoryURL Repurposed

http://marc.info/?l=bugtraq&m=101208650722179&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://online.securityfocus.com/archive/1/265845

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.iss.net/security_center/static/7996.php

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/bid/3966

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.tarantella.com/security/bulletin-04.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor AdvisoryURL Repurposed

Timeline

No history available yet.