CVE-2002-1229

Avaya Cajun switches P880, P882, P580, and P550R 5.2.14 and earlier contain undocumented accounts (1) manuf and (2) diag with default passwords, which allows remote attackers to gain privileges.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.iss.net/security_center/static/10374.php	Vendor Advisory
http://www.kb.cert.org/vuls/id/482241	US Government Resource
http://www.securityfocus.com/bid/5965
http://support.avaya.com/japple/css/japple?PAGE=avaya.css.OpenPage&temp.template.name=Avaya_P580_P882_Undocumented
http://marc.info/?l=bugtraq&m=103470243012971&w=2

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:h:avaya:cajun_p580:5.2.14:::::::*
	cpe:2.3:h:avaya:cajun_p880:5.2.14:::::::*
	cpe:2.3:h:avaya:cajun_p550:4.3.5:::::::*
	cpe:2.3:h:avaya:cajun_p550r:5.2.14:::::::*
	cpe:2.3:h:avaya:cajun_p882:5.2.14:::::::*

Information

Published : 2002-10-27 21:00

Updated : 2016-10-17 19:24

NVD link : CVE-2002-1229

Mitre link : CVE-2002-1229

JSON object : View

CWE

NVD-CWE-Other

Advertisement

Products Affected

avaya

cajun_p580
cajun_p550r
cajun_p880
cajun_p550
cajun_p882

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.iss.net/security_center/static/10374.php", "name": "avaya-cajun-default-passwords(10374)", "tags": ["Vendor Advisory"], "refsource": "XF"}, {"url": "http://www.kb.cert.org/vuls/id/482241", "name": "VU#482241", "tags": ["US Government Resource"], "refsource": "CERT-VN"}, {"url": "http://www.securityfocus.com/bid/5965", "name": "5965", "tags": [], "refsource": "BID"}, {"url": "http://support.avaya.com/japple/css/japple?PAGE=avaya.css.OpenPage&temp.template.name=Avaya_P580_P882_Undocumented", "name": "http://support.avaya.com/japple/css/japple?PAGE=avaya.css.OpenPage&temp.template.name=Avaya_P580_P882_Undocumented", "tags": [], "refsource": "CONFIRM"}, {"url": "http://marc.info/?l=bugtraq&m=103470243012971&w=2", "name": "20021015 Undocumented account vulnerability in Avaya P550R/P580/P880/P882", "tags": [], "refsource": "BUGTRAQ"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Avaya Cajun switches P880, P882, P580, and P550R 5.2.14 and earlier contain undocumented accounts (1) manuf and (2) diag with default passwords, which allows remote attackers to gain privileges."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2002-1229", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "HIGH", "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}}, "publishedDate": "2002-10-28T05:00Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:h:avaya:cajun_p580:5.2.14:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:h:avaya:cajun_p880:5.2.14:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:h:avaya:cajun_p550:4.3.5:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:h:avaya:cajun_p550r:5.2.14:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:h:avaya:cajun_p882:5.2.14:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2016-10-18T02:24Z"}