Vulnerability Details CVE-2002-0762
shadow package in SuSE 8.0 allows local users to destroy the /etc/passwd and /etc/shadow files or assign extra group privileges to some users by changing filesize limits before calling programs that modify the files.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 15.4%
CVSS Severity
CVSS v2 Score 7.2
References
- http://www.iss.net/security_center/static/9102.php
- http://www.novell.com/linux/security/advisories/2002_17_shadow.html
- http://www.securityfocus.com/bid/4757
- http://www.iss.net/security_center/static/9102.php
- http://www.novell.com/linux/security/advisories/2002_17_shadow.html
- http://www.securityfocus.com/bid/4757
Products affected by CVE-2002-0762
-
cpe:2.3:o:suse:suse_linux:8.0