Exploitation Summary
EIP tracks 1 public exploit for CVE-2002-0499. PoCs published by cliph.
AI-analyzed exploit summary This exploit demonstrates a vulnerability in the Linux kernel's d_path() function where a path exceeding PATH_MAX characters is truncated without error, potentially leading to information leakage or path manipulation. The PoC creates a deep directory structure to trigger the bug and observes the truncated output.
Description
The d_path function in Linux kernel 2.2.20 and earlier, and 2.4.18 and earlier, truncates long pathnames without generating an error, which could allow local users to force programs to perform inappropriate operations on the wrong directories.
Exploits (1)
This exploit demonstrates a vulnerability in the Linux kernel's d_path() function where a path exceeding PATH_MAX characters is truncated without error, potentially leading to information leakage or path manipulation. The PoC creates a deep directory structure to trigger the bug and observes the truncated output.