Lucene search
HistoryAug 12, 2002 - 4:00 a.m.
CVE-2002-0849
linux
iscsi
iscsi.conf
red hat linux
security vulnerability
cleartext chap password
privilege escalation
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
7 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Linux-iSCSI iSCSI implementation installs the iscsi.conf file with world-readable permissions on some operating systems, including Red Hat Linux Limbo Beta #1, which could allow local users to gain privileges by reading the cleartext CHAP password.
Affected configurations
Node
ciscoiscsi_driverlinux
| CPE | Name | Operator | Version |
|---|---|---|---|
| cisco:iscsi_driver | cisco iscsi driver | eq | * |
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
7 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2002-0849