AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2002-0638

MEDIUM · CVSS 6.2 EPSS 0.53%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2002-08-12 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 6.2. It affects Linux.

CVE
CVE-2002-0638
Severity
MEDIUM
CVSS
6.2
EPSS
0.53%
Linux

Original NVD Description

setpwnam.c in the util-linux package, as included in Red Hat Linux 7.3 and earlier, and other operating systems, does not properly lock a temporary file when modifying /etc/passwd, which may allow local users to gain privileges via a complex race condition that uses an open file descriptor in utility programs such as chfn and chsh.