CVE-2002-0849

CVSS 4.6 - MEDIUM

Description

Linux-iSCSI iSCSI implementation installs the iscsi.conf file with world-readable permissions on some operating systems, including Red Hat Linux Limbo Beta #1, which could allow local users to gain privileges by reading the cleartext CHAP password.

Affected Products

Vendor	Product	Version
cisco	iscsi_driver	`All versions`

References

http://marc.info/?l=bugtraq&m=102882056105806&w=2

http://marc.info/?l=bugtraq&m=102891036424424&w=2

http://www.iss.net/security_center/static/9792.php

http://www.securityfocus.com/bid/5423

http://marc.info/?l=bugtraq&m=102882056105806&w=2

http://marc.info/?l=bugtraq&m=102891036424424&w=2

http://www.iss.net/security_center/static/9792.php

http://www.securityfocus.com/bid/5423

Weakness Types

NVD-CWE-Other

CVE Information

CVE ID:: CVE-2002-0849
Published:: 2002-08-12
Modified:: 2025-04-03
CVSS Score:: 4.6
Severity:: MEDIUM
Vector:: AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected Vendors

cisco

Quick Actions

View on NVD Find Similar CVEs

CVSS Severity Scale

0.0 - 3.9 LOW

4.0 - 6.9 MEDIUM

7.0 - 8.9 HIGH

9.0 - 10.0 CRITICAL