PT-2002-1363 · Alcatel · Alcatel Omnipcx 4400

Publicado 2002-05-03 · Atualizado 2017-07-11 · CVE-2002-0293

Positive Technologies (AI Summary)

CVSS v2.0

6.2

Média

Vetor base

AV:L/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Alcatel OmniPCX 4400 (affected versions not specified)

Description The issue concerns the FTP service, which allows a specific user, "halt", to escalate privileges to root by modifying the root user's .profile file.

Recommendations For Alcatel OmniPCX 4400, restrict access to the FTP service for the "halt" user until a fix is available. Consider disabling the FTP service temporarily to prevent potential exploitation.

Correção

Identificadores relacionados

CVE-2002-0293

Produtos afetados

Alcatel Omnipcx 4400

Referências · 3

• https://exchange.xforce.ibmcloud.com/vulnerabilities/8225 · Nota
• http://marc.info/?l=bugtraq&m=101413767925869&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-0293 · Nota de Segurança