CVE-2002-0480

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

ISS RealSecure for Nokia devices before IPSO build 6.0.2001.141d is configured to allow a user "skank" on a machine "starscream" to become a key manager when the "first time connection" feature is enabled and before any legitimate administrators have connected, which could allow remote attackers to gain access to the device during installation.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published
Aug 12, 2002
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2002

CVE-2002-04815.1An interaction between Windows Media Player (WMP) and Outlook 2002 allows remote attackers to bypass Outlook security settings and execute JCVE-2002-04825.0Directory traversal vulnerability in PCI Netsupport Manager before version 7, when running web extensions, allows remote attackers to read aCVE-2002-04835.0index.php for PHP-Nuke 5.4 and earlier allows remote attackers to determine the physical pathname of the web server when the file parameter CVE-2002-04845.0move_uploaded_file in PHP does not does not check for the base directory (open_basedir), which could allow remote attackers to upload files CVE-2002-04857.5Norton Anti-Virus (NAV) allows remote attackers to bypass content filtering via attachments whose Content-Type and Content-Disposition headeCVE-2002-04867.2Intellisol Xpede 4.1 uses weak encryption to store authentication information in cookies, which could allow local users with access to the cCVE-2002-04874.6Intellisol Xpede 4.1 stores passwords in plaintext in a Javascript "session timeout" re-authentication capability, which could allow local uCVE-2002-048810.0Linux Directory Penguin traceroute.pl CGI script 1.0 allows remote attackers to execute arbitrary code via shell metacharacters in the host CVE-2002-048910.0Linux Directory Penguin NsLookup CGI script (nslookup.pl) 1.0 allows remote attackers to execute arbitrary code via shell metacharacters in CVE-2002-049010.0Instant Web Mail before 0.60 does not properly filter CR/LF sequences, which allows remote attackers to (1) execute arbitrary POP commands vCVE-2002-049110.0admin.php in AlGuest 1.0 guestbook checks for the existence of the admin cookie to authenticate the AlGuest administrator, which allows remoCVE-2002-04925.0dcshop.cgi in DCShop 1.002 Beta allows remote attackers to delete arbitrary setup files via a null character in the database parameter.
CVE-2002-0480: Critical severity, CVSS 10.0 | Vulnix