{"cve":"CVE-2002-1199","nvd":{"published":"2002-10-28T05:00:00.000","modified":"2026-06-16T21:58:55.383","status":"Modified","description":"The getdbm procedure in ypxfrd allows local users to read arbitrary files, and remote attackers to read databases outside /var/yp, via a directory traversal and symlink attack on the domain and map arguments.","cvss_v4":null,"cvss_v3":null,"cwes":[],"references":["ftp://ftp.caldera.com/pub/updates/OpenServer/CSSA-2002-SCO.40","http://marc.info/?l=bugtraq&m=103426842025029&w=2","http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/47903","http://www.iss.net/security_center/static/10329.php","http://www.kb.cert.org/vuls/id/538033"],"products":["caldera:openlinux","sco:openserver","sun:solaris","sun:sunos"],"source":"nvd","synced_at":"2026-10-19T19:34:38.930894741+00:00"},"epss":{"cve":"CVE-2002-1199","score":0.02238,"percentile":0.82816,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}