PT-2002-2695 · Sharp · Zaurus

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-1974

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Zaurus PDAs versions SL-5000D and SL-5500

Description The issue concerns the FTP service, which does not require authentication. This allows remote attackers to access the file system with root privileges.

Recommendations For Zaurus PDAs versions SL-5000D and SL-5500, consider disabling the FTP service until a patch is available to prevent unauthorized access to the file system.

Correção

Identificadores relacionados

CVE-2002-1974

Produtos afetados

Zaurus

Referências · 6

• http://online.securityfocus.com/archive/1/281437 · Nota
• http://securityfocus.com/bid/5200 · Nota
• http://iss.net/security_center/static/9534.php · Nota
• http://securityfocus.com/archive/1/281549 · Nota
• http://securityfocus.com/archive/1/281652 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1974 · Nota de Segurança