PT-2002-3163 · Fam+3 · Fam+3

Published 1970-01-01 · Updated 2008-09-10 · CVE-2002-0875

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions FAM versions 2.6.4 through 2.6.8 libfam0 (affected versions not specified) libfam-dev (affected versions not specified) fam-devel-2.6.4

Description The issue concerns multiple vulnerabilities in the FAM package, which can be exploited by a local attacker to compromise the confidentiality of protected information. The vulnerabilities can be exploited locally, allowing unprivileged users to obtain the names of files whose access is restricted to the root group.

Recommendations For FAM versions 2.6.4 through 2.6.8, update to a version that contains a fix for this issue. For libfam0, at the moment, there is no information about a newer version that contains a fix for this issue. For libfam-dev, at the moment, there is no information about a newer version that contains a fix for this issue. For fam-devel-2.6.4, update to a version that contains a fix for this issue.

Exploit

Fix

Related Identifiers

BDU:2015-02930

BDU:2015-02931

BDU:2015-02932

BDU:2015-06683

BDU:2015-06684

CVE-2002-0875

DSA-154

Affected Products

Fam

Fam-Devel

Libfam-Dev

Libfam0

References · 19

• 🔥 https://exploit-db.com/exploits/21720 · Exploit
• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0875 · Security Note
• https://bdu.fstec.ru/vul/2015-06684 · Security Note
• http://redhat.com/support/errata/RHSA-2005-005.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02930 · Security Note
• https://bdu.fstec.ru/vul/2015-06683 · Security Note
• ftp://patches.sgi.com/support/free/security/advisories/20000301-03-I · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02932 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2002-0875 · Security Note
• https://osv.dev/vulnerability/CVE-2002-0875 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2002-0875 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02931 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2002-0875 · Vendor Advisory
• http://debian.org/security/2002/dsa-154 · Vendor Advisory