« Volver al listado

CVE-2002-0162

Estado: ModificadaMedia (6.2)—💥 Exploit

LogWatch 2.1.1 y anteriores permiten a usuarios locales ejecutar código arbitrario mediante un ataque de enlaces simbólicos en el directorio temporal de de LogWatch.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

💥 Exploits públicos

Hay código de explotación o plantillas de detección públicos. No es lo mismo que explotación activa confirmada (KEV), pero aumenta el riesgo: parchee con prioridad.

Tecnologías afectadas (1)

Logwatch — Logwatch

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2002-0162",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.2,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:H/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "HIGH",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": true,
        "exploitabilityScore": 1.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2002-03-27T05:00:00.000",
  "references": [
    {
      "url": "http://list.kaybee.org/archives/logwatch-announce/2002-March/000002.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=101724766216872",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://online.securityfocus.com/archive/82/264233",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.iss.net/security_center/static/8652.php",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/4374",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://list.kaybee.org/archives/logwatch-announce/2002-March/000002.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=101724766216872",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://online.securityfocus.com/archive/82/264233",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.iss.net/security_center/static/8652.php",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/4374",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "LogWatch before 2.5 allows local users to execute arbitrary code via a symlink attack on the logwatch temporary directory."
    },
    {
      "lang": "es",
      "value": "LogWatch 2.1.1 y anteriores permiten a usuarios locales ejecutar código arbitrario mediante un ataque de enlaces simbólicos en el directorio temporal de de LogWatch."
    }
  ],
  "lastModified": "2026-06-16T21:56:54.870",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:logwatch:logwatch:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AC1A4892-76B5-4147-BA45-04F5118AAA7E",
              "versionEndIncluding": "2.5"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}