Lucene search
HistoryOct 18, 2007 - 10:00 a.m.
CVE-2002-2263
hp-ux
visualize conference
installation program
insecure permissions
local users
arbitrary files
nvd
6.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:C/I:C/A:N
6.8 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
The installation program for HP-UX Visualize Conference B.11.00.11 running on HP-UX 11.00 and 11.11 installs /etc/dt and its subdirecties with insecure permissions, which allows local users to read or write arbitrary files.
Affected configurations
Node
hphp-uxMatch11.00
ORhphp-uxMatch11.11
hpvisualize_conference_ftpMatchb.11.00.11
| CPE | Name | Operator | Version |
|---|---|---|---|
| hp:visualize_conference_ftp | hp visualize conference ftp | eq | b.11.00.11 |
6.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:C/I:C/A:N
6.8 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2002-2263