CVE-2002-1199

CVE-2002-1199 describes a directory traversal and symlink vulnerability in the getdbm procedure of ypxfrd, affecting products from Caldera, SCO, and Sun. This flaw allows local users to read arbitrary files and remote attackers to access databases outside the intended /var/yp directory by manipulating the domain and map arguments. With a CVSS score of 5.0, it is a network-exploitable vulnerability with low attack complexity, potentially leading to unauthorized information disclosure. Despite a relatively low EPSS score and no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, indicating awareness among security researchers.