← Vulnerability feed

Vulnerability record · CVE-2002-0211 · published 16 May 2002

CVE-2002-0211: Tarantella enterprise vulnerability

Tarantella · Tarantella Enterprise

Race condition in the installation script for Tarantella Enterprise 3 3.01 through 3.20 creates a world-writeable temporary "gunzip" program before executing it, which could allow local users to execute arbitrary commands by modifying the program before it is executed.

6.2 CVSS 2.0 Medium EPSS 0.89% · top 42.4%
6.2CVSS 2.0 base score
0.89%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
10References, 2 tagged exploit
16 Jun 2026Last modified by NVD

Description

Race condition in the installation script for Tarantella Enterprise 3 3.01 through 3.20 creates a world-writeable temporary "gunzip" program before executing it, which could allow local users to execute arbitrary commands by modifying the program before it is executed.

AV:L/AC:H/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://marc.info/?l=bugtraq&m=101208650722179&w=2
http://online.securityfocus.com/archive/1/265845 Exploit
http://www.iss.net/security_center/static/7996.php PatchVendor Advisory
http://www.securityfocus.com/bid/3966
http://www.tarantella.com/security/bulletin-04.html PatchVendor AdvisoryURL Repurposed
http://marc.info/?l=bugtraq&m=101208650722179&w=2
http://online.securityfocus.com/archive/1/265845 Exploit
http://www.iss.net/security_center/static/7996.php PatchVendor Advisory
http://www.securityfocus.com/bid/3966
http://www.tarantella.com/security/bulletin-04.html PatchVendor AdvisoryURL Repurposed

Track CVE-2002-0211 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2004-0079Cisco firewall services module null pointer dereference vulnerabilityThe do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) vi…EPSS 9.5%5.0CVE-2005-0486Tarantella secure global desktop vulnerabilityTarantella Secure Global Desktop Enterprise Edition 4.00 and 3.42, and Tarantella Enterprise 3 3.40 and 3.30, when using RSA SecurID and multiple use…EPSS 1.3%5.0CVE-2004-0081Cisco firewall services module vulnerabilityOpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop…EPSS 7.2%5.0CVE-2004-0112Cisco firewall services module out-of-bounds read vulnerabilityThe SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos …EPSS 10%5.0CVE-2002-0203Tarantella enterprise vulnerabilityttawebtop.cgi in Tarantella Enterprise 3.20 on SPARC Solaris and Linux, and 3.1x and 3.0x including 3.11.903, allows remote attackers to view directo…EPSS 1.9%5.0CVE-2001-0805Tarantella enterprise vulnerabilityDirectory traversal vulnerability in ttawebtop.cgi in Tarantella Enterprise 3.00 and 3.01 allows remote attackers to read arbitrary files via a .. (d…EPSS 7.9%1.2CVE-2002-0296Tarantella enterprise vulnerabilityThe installation of Tarantella Enterprise 3 allows local users to overwrite arbitrary files via a symlink attack on the "spinning" temporary file.EPSS 0.66%

Source: NIST National Vulnerability Database (record CVE-2002-0211), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.