{"id":"CVE-2002-0875","aliases":["DEBIAN-CVE-2002-0875","DSA-154","EUVD-2002-0867","GHSA-mcf7-9m9g-x48v"],"status":"published","title":"Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the...","description":"Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the names of files whose access is restricted to the root group.","severity":{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00963,"percentile":0.6188,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"published":"2002-08-15T00:00:00Z","modified":"2026-08-04T06:00:38Z","exploits":[{"source":"exploitdb","id":"EDB-21720","title":"SGI IRIX 6.5.x - FAM Arbitrary Root Owned Directory File Listing","type":"local","platform":"irix","date":"2002-08-16","verified":true,"url":"https://www.exploit-db.com/exploits/21720"}],"fixes":[{"ecosystem":"Debian:11","package":"fam","fixed_in":["2.6.8-1"],"sources":["osv"]},{"ecosystem":"Debian:3.0","package":"fam","fixed_in":["2.6.6.1-5.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:11","package":"fam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.8-1"}]}]},{"source":"osv","ecosystem":"Debian:3.0","package":"fam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6.1-5.2"}]}]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"sgi","product":"fam"},{"vendor":"sgi","product":"irix"}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc","tags":["vendor-advisory","x_refsource_FREEBSD","x_transferred","advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-005.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","web"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20000301-03-I","tags":["vendor-advisory","x_refsource_SGI","x_transferred","advisory"]},{"url":"http://www.iss.net/security_center/static/9880.php","tags":["vdb-entry","x_refsource_XF","x_transferred","web"]},{"url":"http://www.debian.org/security/2002/dsa-154","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Patch","Vendor Advisory","advisory","fix"]},{"url":"http://www.securityfocus.com/bid/5487","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2002-0875"},{"url":"https://github.com/advisories/GHSA-mcf7-9m9g-x48v"},{"url":"https://security-tracker.debian.org/tracker/CVE-2002-0875","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2002-0875","description":"Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the names of files whose access is restricted to the root group.","status":"published","published":"2003-04-02T05:00:00Z","modified":"2024-08-08T03:03:49.21Z","updated_at":"2026-11-02T14:33:55.303902Z"}],"euvd":[{"id":"EUVD-2002-0867","description":"Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the names of files whose access is restricted to the root group.","status":"published","published":"2003-04-02T05:00:00Z","modified":"2024-08-08T03:03:49Z","updated_at":"2026-11-03T01:14:58.693075Z"}],"ghsa":[{"id":"GHSA-mcf7-9m9g-x48v","title":"Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the...","description":"Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the names of files whose access is restricted to the root group.","status":"published","published":"2022-05-03T03:08:02Z","modified":"2023-02-01T05:01:04Z","updated_at":"2026-11-02T14:49:39.648637Z"}],"nvd":[{"id":"CVE-2002-0875","description":"Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the names of files whose access is restricted to the root group.","status":"published","published":"2002-09-05T04:00:00Z","modified":"2026-06-16T21:58:18.583Z","cvss":[{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"updated_at":"2026-11-02T14:00:42.827505Z"}],"osv":[{"id":"CVE-2002-0875","description":"Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the names of files whose access is restricted to the root group.","status":"published","published":"2002-09-05T04:00:00Z","modified":"2026-04-10T03:33:09.426364Z","updated_at":"2026-11-02T15:43:55.998148Z"},{"id":"DEBIAN-CVE-2002-0875","description":"Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the names of files whose access is restricted to the root group.","status":"published","published":"2002-09-05T04:00:00Z","modified":"2026-08-04T06:00:38.416063452Z","updated_at":"2026-11-02T15:45:22.248131Z"},{"id":"DSA-154","title":"fam - privilege escalation","status":"published","published":"2002-08-15T00:00:00Z","modified":"2026-03-09T01:00:52.369291Z","updated_at":"2026-11-02T15:46:14.734124Z"}]}}