CVE-2002-1618

HIGH 7.2CVE-2002-1618 · Published 16/10/2002 · updated 16/06/2026

In short

CVE-2002-1618 is a HIGH (CVSS 7.2) vulnerability affecting jfs (hp).
Chance of exploitation in the next 30 days (EPSS): 0.57%, higher than 47.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
jfs hp	`= 3.1`	No fix yet

Description

JFS (JFS3.1 and OnlineJFS) in HP-UX 10.20, 11.00, and 11.04 does not properly implement the sticky bit functionality, which could allow attackers to bypass intended restrictions on filesystems.

References

kb.cert.org/vuls/id/248337 · Patch
securityfocus.com/advisories/4569 · Patch
securityfocus.com/bid/5979 · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/10399
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5700

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free