CVE-2002-0435

Race condition in the recursive (1) directory deletion and (2) directory move in GNU File Utilities (fileutils) 4.1 and earlier allows local users to delete directories as the user running fileutils by moving a low-level directory to a higher level as it is being deleted, which causes fileutils to chdir to a ".." directory that is higher than expected, possibly up to the root file system.

• ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-018.1.txtPatch, Vendor Advisory
• http://mail.gnu.org/archive/html/bug-fileutils/2002-03/msg00028.html
• http://www.iss.net/security_center/static/8432.phpPatch, Vendor Advisory
• http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-031.php
• http://www.redhat.com/support/errata/RHSA-2003-015.html
• http://www.redhat.com/support/errata/RHSA-2003-016.html
• http://www.securityfocus.com/archive/1/260936Vendor Advisory
• http://www.securityfocus.com/bid/4266Patch, Vendor Advisory
• ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-018.1.txtPatch, Vendor Advisory
• http://mail.gnu.org/archive/html/bug-fileutils/2002-03/msg00028.html
• http://www.iss.net/security_center/static/8432.phpPatch, Vendor Advisory
• http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-031.php
• http://www.redhat.com/support/errata/RHSA-2003-015.html
• http://www.redhat.com/support/errata/RHSA-2003-016.html
• http://www.securityfocus.com/archive/1/260936Vendor Advisory
• http://www.securityfocus.com/bid/4266Patch, Vendor Advisory

Published

Jul 26, 2002

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2002-0429The iBCS routines in arch/i386/kernel/traps.c for Linux kern…
• CVE-2002-0430MultiFileUploadHandler.php in the Sun Cobalt RaQ XTR adminis…
• CVE-2002-0431XTux allows remote attackers to cause a denial of service (C…
• CVE-2002-0432Buffer overflow in (1) lprintf and (2) cprintf in sysdep.c o…
• CVE-2002-0433Pi3Web 2.0.0 allows remote attackers to view restricted file…
• CVE-2002-0434Marcus S. Xenakis directory.php script allows remote attacke…
• CVE-2002-0436sscd_suncourier.pl CGI script in the Sun Sunsolve CD pack al…
• CVE-2002-0437Smsd in SMS Server Tools (SMStools) before 1.4.8 allows remo…
• CVE-2002-0438ZyXEL ZyWALL 10 before 3.50 allows remote attackers to cause…
• CVE-2002-0439Cross-site scripting vulnerability in CaupoShop 1.30a and ea…
• CVE-2002-0440Trend Micro InterScan VirusWall HTTP proxy 3.6 with the "Ski…
• CVE-2002-0441Directory traversal vulnerability in imlist.php for Php Imgl…