CVE-2002-0296

LOW 1.2CVE-2002-0296 · Published 31/05/2002 · updated 16/06/2026

In short

CVE-2002-0296 is a LOW (CVSS 1.2) vulnerability affecting tarantella enterprise (tarantella).
Chance of exploitation in the next 30 days (EPSS): 0.66%, higher than 51.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
tarantella enterprise tarantella	`= 3.0= 3.01= 3.10= 3.11= 3.20`	No fix yet

The installation of Tarantella Enterprise 3 allows local users to overwrite arbitrary files via a symlink attack on the "spinning" temporary file.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.