Lucene search
HistoryOct 03, 2022 - 4:23 p.m.
CVE-2002-1974
ftp service
zaurus pdas
sl-5000d
sl-5500
authentication bypass
file system access
remote exploit
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.7 Medium
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
79.8%
The FTP service in Zaurus PDAs SL-5000D and SL-5500 does not require authentication, which allows remote attackers to access the file system as root.
Affected configurations
Node
sharpzaurusMatchsl-5000d
ORsharpzaurusMatchsl-5500
| CPE | Name | Operator | Version |
|---|---|---|---|
| sharp:zaurus | sharp zaurus | eq | sl-5000d |
| sharp:zaurus | sharp zaurus | eq | sl-5500 |
Related
nessus
nessus
Zaurus PDA FTP Server Unpassworded root Account
2002-07-11 00:00:00
nvd
nvd
CVE-2002-1974
2002-12-31 05:00:00
cvelist
cvelist
CVE-2002-1974
2022-10-03 16:23:47
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.7 Medium
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
79.8%
Related for CVE-2002-1974