CVE-2002-0435
Race condition in the recursive (1) directory deletion and (2) directory move in GNU File...
CVE-2002-0435 is a low vulnerability (CVSS 1.2) in Gnu Fileutils, published July 26, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 27th percentile. No source names a fixed version.
Race condition in the recursive (1) directory deletion and (2) directory move in GNU File Utilities (fileutils) 4.1 and earlier allows local users to delete directories as the user running fileutils by moving a low-level directory to a higher level as it is being deleted, which causes fileutils to chdir to a ".." directory that is higher than expected, possibly up to the root file system.
Exploit likelihood
What each source reports
NVD Score used
Race condition in the recursive (1) directory deletion and (2) directory move in GNU File Utilities (fileutils) 4.1 and earlier allows local users to delete directories as the user running fileutils by moving a low-level directory to a higher level as it is being deleted, which causes fileutils to chdir to a ".." directory that is higher than expected, possibly up to the root file system.
- Record
CVE-2002-0435- CVSS 2.0
- 1.2 Low
AV:L/AC:H/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
Race condition in the recursive (1) directory deletion and (2) directory move in GNU File Utilities (fileutils) 4.1 and earlier allows local users to delete directories as the user running fileutils by moving a low-level directory to a higher level as it is being deleted, which causes fileutils to chdir to a ".." directory that is higher than expected, possibly up to the root file system.
- Record
CVE-2002-0435- Updated
- 2026-11-02
EUVDEUVD-2002-0432 No score
Race condition in the recursive (1) directory deletion and (2) directory move in GNU File Utilities (fileutils) 4.1 and earlier allows local users to delete directories as the user running fileutils by moving a low-level directory to a higher level as it is being deleted, which causes fileutils to chdir to a ".." directory that is higher than expected, possibly up to the root file system.
- Record
EUVD-2002-0432- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m4m8-rghq-9wjc No score
Race condition in the recursive (1) directory deletion and (2) directory move in GNU File...
Race condition in the recursive (1) directory deletion and (2) directory move in GNU File Utilities (fileutils) 4.1 and earlier allows local users to delete directories as the user running fileutils by moving a low-level directory to a higher level as it is being deleted, which causes fileutils to chdir to a ".." directory that is higher than expected, possibly up to the root file system.
- Record
GHSA-m4m8-rghq-9wjc- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |
References
redhat.com/support/errata/RHSA-2003-016.html
linux-mandrake.com/en/security/2002/MDKSA-2002-031.php
mail.gnu.org/archive/html/bug-fileutils/2002-03/msg00028.html
securityfocus.com/bid/4266
iss.net/security_center/static/8432.php
nvd.nist.gov/vuln/detail/CVE-2002-0435
github.com/advisories/GHSA-m4m8-rghq-9wjc