CVE-2002-1713 — MEDIUM (5.5)

Vulnerability Description

The Standard security setting for Mandrake-Security package (msec) in Mandrake 8.2 installs home directories with world-readable permissions, which could allow local users to read other user's files.

CVSS Score

5.5

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Mandrakesoft	Mandrake Linux	8.2

Related Weaknesses (CWE)

CWE-276

References

http://online.securityfocus.com/archive/1/277515Broken LinkThird Party AdvisoryVDB Entry
http://www.kb.cert.org/vuls/id/455323Third Party AdvisoryUS Government Resource
http://www.securityfocus.com/bid/5050Broken LinkThird Party AdvisoryVDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/9389Third Party AdvisoryVDB Entry
http://online.securityfocus.com/archive/1/277515Broken LinkThird Party AdvisoryVDB Entry
http://www.kb.cert.org/vuls/id/455323Third Party AdvisoryUS Government Resource
http://www.securityfocus.com/bid/5050Broken LinkThird Party AdvisoryVDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/9389Third Party AdvisoryVDB Entry

FAQ

What is CVE-2002-1713?

CVE-2002-1713 is a vulnerability with a CVSS score of 5.5 (MEDIUM). The Standard security setting for Mandrake-Security package (msec) in Mandrake 8.2 installs home directories with world-readable permissions, which could allow local users to read other user's files.

How severe is CVE-2002-1713?

CVE-2002-1713 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2002-1713?

Check the references section above for vendor advisories and patch information. Affected products include: Mandrakesoft Mandrake Linux.