CVE-2002-0540

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Nortel CVX 1800 is installed with a default "public" community string, which allows remote attackers to read usernames and passwords and modify the CVX configuration.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2002-04/0272.htmlVendor Advisory
http://online.securityfocus.com/archive/1/267627
http://www.iss.net/security_center/static/8848.phpPatch, Vendor Advisory
http://www.kb.cert.org/vuls/id/403315US Government Resource
http://www.securityfocus.com/bid/4507Exploit, Patch, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2002-04/0272.htmlVendor Advisory
http://online.securityfocus.com/archive/1/267627
http://www.iss.net/security_center/static/8848.phpPatch, Vendor Advisory
http://www.kb.cert.org/vuls/id/403315US Government Resource
http://www.securityfocus.com/bid/4507Exploit, Patch, Vendor Advisory

Timeline

Published: Jul 3, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-05417.5Buffer overflow in Tivoli Storage Manager TSM (1) Server or Storage Agents 3.1 through 5.1, and (2) the TSM Client Acceptor Service 4.2 and CVE-2002-05427.2mail in OpenBSD 2.9 and 3.0 processes a tilde (~) escape character in a message even when it is not in interactive mode, which could allow l CVE-2002-05435.0Directory traversal vulnerability in Aprelium Abyss Web Server (abyssws) before 1.0.0.2 allows remote attackers to read files outside the we CVE-2002-05447.2Aprelium Abyss Web Server (abyssws) before 1.0.3 stores the administrative console password in plaintext in the abyss.conf file, which allow CVE-2002-05455.0Cisco Aironet before 11.21 with Telnet enabled allows remote attackers to cause a denial of service (reboot) via a series of login attempts CVE-2002-05467.5Cross-site scripting vulnerability in the mini-browser for Winamp 2.78 and 2.79 allows remote attackers to execute script via an ID3v1 or ID CVE-2002-05477.5Buffer overflow in the mini-browser for Winamp 2.79 and earlier allows remote attackers to cause a denial of service (crash) and possibly ex CVE-2002-05487.5Anthill allows remote attackers to bypass authentication and file bug reports by directly accessing the postbug.php program instead of enter CVE-2002-05497.5Cross-site scripting vulnerabilities in Anthill allow remote attackers to execute script as other Anthill users.CVE-2002-05507.5Dynamic Guestbook 3.0 allows remote attackers to execute arbitrary code via shell metacharacters in the gbdaten parameter.CVE-2002-05517.5Cross-site scripting vulnerability in Dynamic Guestbook 3.0 allows remote attackers to execute code in clients who access guestbook pages vi CVE-2002-05527.5Multiple buffer overflows in Melange Chat server 2.02 allow remote or local attackers to cause a denial of service (crash) and possibly exec