Skip to content

CVE-2002-0875

Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the...

2.1 LowPublic exploitFix available

CVE-2002-0875 is a low vulnerability (CVSS 2.1) in Sgi Fam, published August 15, 2002. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.96%, the 61st percentile. Fixed in fam 2.6.8-1.

Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the names of files whose access is restricted to the root group.

Exploit likelihood

0.96%Down 1.8 points since Feb 4, 2022

What each source reports

NVD Score used 2.1

Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the names of files whose access is restricted to the root group.

Record: CVE-2002-0875
CVSS 2.0: 2.1 LowAV:L/AC:L/Au:N/C:P/I:N/A:N
Updated: 2026-11-02

CVE List No score

Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the names of files whose access is restricted to the root group.

Record: CVE-2002-0875
Updated: 2026-11-02

EUVDEUVD-2002-0867 No score

Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the names of files whose access is restricted to the root group.

Record: EUVD-2002-0867
Updated: 2026-11-03

GitHub AdvisoriesGHSA-mcf7-9m9g-x48v No score

Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the...

Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the names of files whose access is restricted to the root group.

Record: GHSA-mcf7-9m9g-x48v
Updated: 2026-11-02

OSV No score

Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the names of files whose access is restricted to the root group.

Record: CVE-2002-0875
Updated: 2026-11-02

OSVDEBIAN-CVE-2002-0875 No score

Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the names of files whose access is restricted to the root group.

Record: DEBIAN-CVE-2002-0875
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`fam` Debian:11	before 2.6.8-1	2.6.8-1
`fam` Debian:3.0	before 2.6.6.1-5.2	2.6.6.1-5.2

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	SGI IRIX 6.5.x - FAM Arbitrary Root Owned Directory File Listing	2002-08-16

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV

References