{"id":"CVE-2002-0499","aliases":["EUVD-2002-0495","GHSA-xh92-g23r-644g"],"status":"published","title":"The d_path function in Linux kernel 2.2.20 and earlier, and 2.4.18 and earlier, truncates long...","description":"The d_path function in Linux kernel 2.2.20 and earlier, and 2.4.18 and earlier, truncates long pathnames without generating an error, which could allow local users to force programs to perform inappropriate operations on the wrong directories.","severity":{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00972,"percentile":0.62194,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2002-06-11T04:00:00Z","modified":"2026-06-16T21:57:33Z","exploits":[{"source":"exploitdb","id":"EDB-21353","title":"Linux Kernel 2.2.x/2.3/2.4.x - 'd_path()' Path Truncation","type":"local","platform":"linux","date":"2002-03-26","verified":true,"url":"https://www.exploit-db.com/exploits/21353"}],"products":[{"vendor":"linux","product":"linux_kernel"}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0074.html","tags":["mailing-list","x_refsource_VULNWATCH","x_transferred"]},{"url":"http://www.iss.net/security_center/static/8634.php","tags":["vdb-entry","x_refsource_XF","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4367","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit","Vendor Advisory"]},{"url":"http://www.cs.helsinki.fi/linux/linux-kernel/2002-13/0054.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/264117","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2002-0499"},{"url":"https://github.com/advisories/GHSA-xh92-g23r-644g"}],"sources":{"cve":[{"id":"CVE-2002-0499","description":"The d_path function in Linux kernel 2.2.20 and earlier, and 2.4.18 and earlier, truncates long pathnames without generating an error, which could allow local users to force programs to perform inappropriate operations on the wrong directories.","status":"published","published":"2002-06-11T04:00:00Z","modified":"2024-08-08T02:49:28.509Z","updated_at":"2026-11-02T14:33:55.642267Z"}],"euvd":[{"id":"EUVD-2002-0495","description":"The d_path function in Linux kernel 2.2.20 and earlier, and 2.4.18 and earlier, truncates long pathnames without generating an error, which could allow local users to force programs to perform inappropriate operations on the wrong directories.","status":"published","published":"2002-06-11T04:00:00Z","modified":"2024-08-08T02:49:28Z","updated_at":"2026-11-03T01:15:00.542292Z"}],"ghsa":[{"id":"GHSA-xh92-g23r-644g","title":"The d_path function in Linux kernel 2.2.20 and earlier, and 2.4.18 and earlier, truncates long...","description":"The d_path function in Linux kernel 2.2.20 and earlier, and 2.4.18 and earlier, truncates long pathnames without generating an error, which could allow local users to force programs to perform inappropriate operations on the wrong directories.","status":"published","published":"2022-04-30T18:19:20Z","modified":"2023-01-30T05:05:50Z","updated_at":"2026-11-02T14:47:22.035472Z"}],"nvd":[{"id":"CVE-2002-0499","description":"The d_path function in Linux kernel 2.2.20 and earlier, and 2.4.18 and earlier, truncates long pathnames without generating an error, which could allow local users to force programs to perform inappropriate operations on the wrong directories.","status":"published","published":"2002-08-12T04:00:00Z","modified":"2026-06-16T21:57:33.763Z","cvss":[{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","level":"low","assessor":"primary"}],"updated_at":"2026-11-02T14:00:42.220505Z"}]}}