CVE-2002-0211

Race condition in the installation script for Tarantella Enterprise 3 3.01 through 3.20 creates a world-writeable temporary "gunzip" program before executing it, which could allow local users to execute arbitrary commands by modifying the program before it is executed.

• http://marc.info/?l=bugtraq&m=101208650722179&w=2
• http://online.securityfocus.com/archive/1/265845Exploit
• http://www.iss.net/security_center/static/7996.phpPatch, Vendor Advisory
• http://www.securityfocus.com/bid/3966
• http://www.tarantella.com/security/bulletin-04.htmlPatch, Vendor Advisory, URL Repurposed
• http://marc.info/?l=bugtraq&m=101208650722179&w=2
• http://online.securityfocus.com/archive/1/265845Exploit
• http://www.iss.net/security_center/static/7996.phpPatch, Vendor Advisory
• http://www.securityfocus.com/bid/3966
• http://www.tarantella.com/security/bulletin-04.htmlPatch, Vendor Advisory, URL Repurposed

Published

May 16, 2002

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2002-0205Cross-site scripting (CSS) vulnerability in error.asp for Pl…
• CVE-2002-0206index.php in Francisco Burzi PHP-Nuke 5.3.1 and earlier, and…
• CVE-2002-0207Buffer overflow in Real Networks RealPlayer 8.0 and earlier …
• CVE-2002-0208PGP Security PGPfire 7.1 for Windows alters the system's TCP…
• CVE-2002-0209Nortel Alteon ACEdirector WebOS 9.0, with the Server Load Ba…
• CVE-2002-0210setlicense for TOLIS Group Backup and Restore Utility (BRU) …
• CVE-2002-0212The login for Hosting Controller 1.1 through 1.4.1 returns d…
• CVE-2002-0213xkas in Xinet K-AShare 0.011.01 for IRIX allows local users …
• CVE-2002-0214Compaq Intel PRO/Wireless 2011B LAN USB Device Driver 1.5.16…
• CVE-2002-0215Agora.cgi 3.2r through 4.0 while in debug mode allows remote…
• CVE-2002-0216userinfo.php in XOOPS 1.0 RC1 allows remote attackers to obt…
• CVE-2002-0217Cross-site scripting (CSS) vulnerabilities in the Private Me…