Vulnerabilities > CVE-2002-0211 - Unspecified vulnerability in Tarantella Enterprise

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
tarantella
exploit available

Summary

Race condition in the installation script for Tarantella Enterprise 3 3.01 through 3.20 creates a world-writeable temporary "gunzip" program before executing it, which could allow local users to execute arbitrary commands by modifying the program before it is executed.

Exploit-Db

descriptionTarantella Enterprise 3 gunzip Race Condition Vulnerability. CVE-2002-0211. Local exploit for unix platform
idEDB-ID:21244
last seen2016-02-02
modified2002-02-08
published2002-02-08
reporterLarry Cashdollar
sourcehttps://www.exploit-db.com/download/21244/
titleTarantella Enterprise 3 gunzip Race Condition Vulnerability