PT-2002-1363 · Alcatel · Alcatel Omnipcx 4400

Published 2002-05-03 · Updated 2017-07-11 · CVE-2002-0293

Positive Technologies (AI Summary)

CVSS v2.0

6.2

Medium

Base vector

AV:L/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Alcatel OmniPCX 4400 (affected versions not specified)

Description The issue concerns the FTP service, which allows a specific user, "halt", to escalate privileges to root by modifying the root user's .profile file.

Recommendations For Alcatel OmniPCX 4400, restrict access to the FTP service for the "halt" user until a fix is available. Consider disabling the FTP service temporarily to prevent potential exploitation.

Fix

Related Identifiers

CVE-2002-0293

Affected Products

Alcatel Omnipcx 4400

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2002-0293 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/8225 · Note
• http://marc.info/?l=bugtraq&m=101413767925869&w=2 · Note