PT-2002-2614 · NetGear · Netgear Fvs318

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-1892

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions NETGEAR FVS318 version 1.1

Description The issue allows local users to obtain sensitive information because the username and password are stored in a readable format when a backup of the configuration file is made.

Recommendations For NETGEAR FVS318 version 1.1, consider changing the password and restricting local access to the configuration file backup to minimize the risk of sensitive information disclosure. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2002-1892

Affected Products

Netgear Fvs318

References · 5

• http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0133.html · Vendor Advisory
• http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00004.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-1892 · Security Note
• http://iss.net/security_center/static/10216.php · Note
• http://securityfocus.com/bid/5830 · Note