CVEvulnerability
CVE-2002-0480
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2002-08-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
ISS RealSecure for Nokia devices before IPSO build 6.0.2001.141d is configured to allow a user "skank" on a machine "starscream" to become a key manager when the "first time connection" feature is enabled and before any legitimate administrators have connected, which could allow remote attackers to gain access to the device during installation.
Affected configurations
• iss realsecure nokia 6.0
References
- http://marc.info/?l=bugtraq&m=101666833321138&w=2 marc.info
- http://marc.info/?l=bugtraq&m=101675086010051&w=2 marc.info
- http://marc.info/?l=bugtraq&m=101684141308876&w=2 marc.info
- http://www.securityfocus.com/bid/4331 www.securityfocus.com
- http://marc.info/?l=bugtraq&m=101666833321138&w=2 marc.info
- http://marc.info/?l=bugtraq&m=101675086010051&w=2 marc.info
- http://marc.info/?l=bugtraq&m=101684141308876&w=2 marc.info
- http://www.securityfocus.com/bid/4331 www.securityfocus.com