PT-2002-2695 · Sharp · Zaurus

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-1974

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Zaurus PDAs versions SL-5000D and SL-5500

Description The issue concerns the FTP service, which does not require authentication. This allows remote attackers to access the file system with root privileges.

Recommendations For Zaurus PDAs versions SL-5000D and SL-5500, consider disabling the FTP service until a patch is available to prevent unauthorized access to the file system.

Fix

Related Identifiers

CVE-2002-1974

Affected Products

Zaurus

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2002-1974 · Security Note
• http://online.securityfocus.com/archive/1/281437 · Note
• http://securityfocus.com/bid/5200 · Note
• http://iss.net/security_center/static/9534.php · Note
• http://securityfocus.com/archive/1/281549 · Note
• http://securityfocus.com/archive/1/281652 · Note