{"api_version":"1","generated_at":"2026-07-23T03:25:13+00:00","cve":"CVE-2002-0080","urls":{"html":"https://cve.report/CVE-2002-0080","api":"https://cve.report/api/cve/CVE-2002-0080.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2002-0080","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2002-0080"},"summary":{"title":"CVE-2002-0080","description":"rsync, when running in daemon mode, does not properly call setgroups before dropping privileges, which could provide supplemental group privileges to local users, who could then read certain files that would otherwise be disallowed.","state":"PUBLISHED","assigner":"mitre","published_at":"2002-03-15 05:00:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["CWE-269","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"2.1","severity":"","vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","data":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.securityfocus.com/bid/4285","name":"http://www.securityfocus.com/bid/4285","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"RSync Daemon Mode Supplementary Group Privilege Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-026.html","name":"http://www.redhat.com/support/errata/RHSA-2002-026.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"],"title":"redhat.com | Red Hat Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.caldera.com/support/security/advisories/CSSA-2002-014.1.txt","name":"http://www.caldera.com/support/security/advisories/CSSA-2002-014.1.txt","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"404 | Caldera","mime":"text/html","httpstatus":"404","archivestatus":"404"},{"url":"http://www.iss.net/security_center/static/8463.php","name":"http://www.iss.net/security_center/static/8463.php","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"ISS X-Force Database: linux-rsync-inherit-privileges (8463): Linux rsync fails to drop privileges for supplementary groups in daemon mode","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-024.php3","name":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-024.php3","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"","mime":"","httpstatus":"-1","archivestatus":"404"},{"url":"https://www.cve.org/CVERecord?id=CVE-2002-0080","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2002-0080","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2002","cve_id":"80","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"redhat","cpe5":"linux","cpe6":"6.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"80","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"redhat","cpe5":"linux","cpe6":"7.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"80","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"redhat","cpe5":"linux","cpe6":"7.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"80","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"redhat","cpe5":"linux","cpe6":"7.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"80","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"rsync","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[{"cve":"CVE-2002-0080","qid":"900285","title":"CBL-Mariner Linux Security Update for rsync 3.1.3"}]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-08T02:35:17.589Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"linux-rsync-inherit-privileges(8463)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"http://www.iss.net/security_center/static/8463.php"},{"name":"MDKSA-2002:024","tags":["vendor-advisory","x_refsource_MANDRAKE","x_transferred"],"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-024.php3"},{"name":"CSSA-2002-014.1","tags":["vendor-advisory","x_refsource_CALDERA","x_transferred"],"url":"http://www.caldera.com/support/security/advisories/CSSA-2002-014.1.txt"},{"name":"4285","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/4285"},{"name":"RHSA-2002:026","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://www.redhat.com/support/errata/RHSA-2002-026.html"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2002-03-11T00:00:00.000Z","descriptions":[{"lang":"en","value":"rsync, when running in daemon mode, does not properly call setgroups before dropping privileges, which could provide supplemental group privileges to local users, who could then read certain files that would otherwise be disallowed."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2002-06-16T00:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"linux-rsync-inherit-privileges(8463)","tags":["vdb-entry","x_refsource_XF"],"url":"http://www.iss.net/security_center/static/8463.php"},{"name":"MDKSA-2002:024","tags":["vendor-advisory","x_refsource_MANDRAKE"],"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-024.php3"},{"name":"CSSA-2002-014.1","tags":["vendor-advisory","x_refsource_CALDERA"],"url":"http://www.caldera.com/support/security/advisories/CSSA-2002-014.1.txt"},{"name":"4285","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/4285"},{"name":"RHSA-2002:026","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://www.redhat.com/support/errata/RHSA-2002-026.html"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2002-0080","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"rsync, when running in daemon mode, does not properly call setgroups before dropping privileges, which could provide supplemental group privileges to local users, who could then read certain files that would otherwise be disallowed."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"linux-rsync-inherit-privileges(8463)","refsource":"XF","url":"http://www.iss.net/security_center/static/8463.php"},{"name":"MDKSA-2002:024","refsource":"MANDRAKE","url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-024.php3"},{"name":"CSSA-2002-014.1","refsource":"CALDERA","url":"http://www.caldera.com/support/security/advisories/CSSA-2002-014.1.txt"},{"name":"4285","refsource":"BID","url":"http://www.securityfocus.com/bid/4285"},{"name":"RHSA-2002:026","refsource":"REDHAT","url":"http://www.redhat.com/support/errata/RHSA-2002-026.html"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2002-0080","datePublished":"2002-06-25T04:00:00.000Z","dateReserved":"2002-02-21T00:00:00.000Z","dateUpdated":"2024-08-08T02:35:17.589Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2002-03-15 05:00:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["CWE-269","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:rsync:*:*:*:*:*:*:*:*","versionEndExcluding":"2.5.3","matchCriteriaId":"2388AF97-7C59-4CF8-9B4F-EA3EE07EC68B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0633B5A6-7A88-4A96-9462-4C09D124ED36"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"29B186E5-7C2F-466E-AA4A-8F2B618F8A14"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"1D46E093-1C68-43BB-B281-12117EC8DE0F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"E562907F-D915-4030-847A-3C6834A80D4E"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2002","CveId":"80","Ordinal":"1","Title":"CVE-2002-0080","CVE":"CVE-2002-0080","Year":"2002"},"notes":[{"CveYear":"2002","CveId":"80","Ordinal":"1","NoteData":"rsync, when running in daemon mode, does not properly call setgroups before dropping privileges, which could provide supplemental group privileges to local users, who could then read certain files that would otherwise be disallowed.","Type":"Description","Title":"CVE-2002-0080"},{"CveYear":"2002","CveId":"80","Ordinal":"2","NoteData":"2002-06-25","Type":"Other","Title":"Published"},{"CveYear":"2002","CveId":"80","Ordinal":"3","NoteData":"2002-06-15","Type":"Other","Title":"Modified"}]}}}