CVE-2002-0394

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Red-M 1050 (Bluetooth Access Point) uses case insensitive passwords, which makes it easier for attackers to conduct a brute force guessing attack due to the smaller space of possible passwords.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.atstake.com/research/advisories/2002/a060502-1.txtExploit, Patch, Vendor Advisory
http://www.iss.net/security_center/static/9263.php
http://www.atstake.com/research/advisories/2002/a060502-1.txtExploit, Patch, Vendor Advisory
http://www.iss.net/security_center/static/9263.php

Timeline

Published: Jul 26, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-039510.0The TFTP server for Red-M 1050 (Bluetooth Access Point) can not be disabled and makes it easier for remote attackers to crack the administra CVE-2002-03967.5The web management server for Red-M 1050 (Bluetooth Access Point) does not use session-based credentials to authenticate users, which allows CVE-2002-03975.0Red-M 1050 (Bluetooth Access Point) publicizes its name, IP address, and other information in UDP packets to a broadcast address, which allo CVE-2002-039810.0Red-M 1050 (Bluetooth Access Point) PPP server allows bonded users to cause a denial of service and possibly execute arbitrary code via a lo CVE-2002-03995.0Directory traversal vulnerability in GNU tar 1.13.19 through 1.13.25, and possibly later versions, allows attackers to overwrite arbitrary f CVE-2002-04005.0ISC BIND 9 before 9.2.1 allows remote attackers to cause a denial of service (shutdown) via a malformed DNS packet that triggers an error co CVE-2002-04017.5SMB dissector in Ethereal 0.9.3 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via malfo CVE-2002-04027.5Buffer overflow in X11 dissector in Ethereal 0.9.3 and earlier allows remote attackers to cause a denial of service (crash) and possibly exe CVE-2002-04035.0DNS dissector in Ethereal before 0.9.3 allows remote attackers to cause a denial of service (CPU consumption) via a malformed packet that ca CVE-2002-04045.0Vulnerability in GIOP dissector in Ethereal before 0.9.3 allows remote attackers to cause a denial of service (memory consumption).CVE-2002-040510.0Buffer overflow in Transsoft Broker FTP Server 5.0 evaluation allows remote attackers to cause a denial of service and possibly execute arbi CVE-2002-04065.0Menasoft SPHERE server 0.99x and 0.5x allows remote attackers to cause a denial of service by establishing a large number of connections to