PT-2002-2645 · Schneider Electric · Powerchute Plus

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-1924

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PowerChute plus version 5.0.2

Description The issue concerns the creation of a shared and world-writable "Pwrchute" directory during the installation of the affected software, potentially allowing remote attackers to modify or create files within this directory.

Recommendations For PowerChute plus version 5.0.2, consider restricting access to the "Pwrchute" directory to prevent unauthorized modifications or file creations until a patch is available.

Correção

Identificadores relacionados

CVE-2002-1924

Produtos afetados

Powerchute Plus

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2002-1924 · Nota de Segurança
• http://security.nnov.ru/news2064.html · Aviso do Fabricante
• http://online.securityfocus.com/archive/1/277930 · Nota
• http://securityfocus.com/bid/5069 · Nota
• http://iss.net/security_center/static/9413.php · Nota