CVE-2002-2382

CVE-2002-2382 describes a local privilege escalation vulnerability affecting CVSup 1.2. Attackers can exploit a symlink race condition in the cvsupd.sh script, specifically targeting the /var/tmp/cvsupd.out file, to overwrite arbitrary files. With a CVSS score of 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C), this flaw allows an unauthenticated local user to achieve complete compromise of confidentiality, integrity, and availability. While the vulnerability is severe, there is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage.