← Database

CVE-2002-0211

MEDIUM CVSS: 6.2 Published: 2002-05-16 Modified: 2026-06-16

Description

Race condition in the installation script for Tarantella Enterprise 3 3.01 through 3.20 creates a world-writeable temporary "gunzip" program before executing it, which could allow local users to execute arbitrary commands by modifying the program before it is executed.

Affected Platforms

Tarantella Tarantella Enterprise

Weakness Type

NVD-CWE-Other

References