CVE-2002-0763

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Vulnerability in administration server for HP VirtualVault 4.5 on HP-UX 11.04 allows remote web servers or privileged external processes to bypass access restrictions and establish connections to the server.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/hp/2002-q2/0037.htmlPatch, Vendor Advisory
http://www.iss.net/security_center/static/9038.phpPatch, Vendor Advisory
http://www.securityfocus.com/bid/4690Patch, Vendor Advisory
http://archives.neohapsis.com/archives/hp/2002-q2/0037.htmlPatch, Vendor Advisory
http://www.iss.net/security_center/static/9038.phpPatch, Vendor Advisory
http://www.securityfocus.com/bid/4690Patch, Vendor Advisory

Timeline

Published: Aug 12, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-07647.5Phorum 3.3.2a allows remote attackers to execute arbitrary commands via an HTTP request to (1) plugin.php, (2) admin.php, or (3) del.php tha CVE-2002-07657.5sshd in OpenSSH 3.2.2, when using YP with netgroups and under certain conditions, may allow users to successfully authenticate and log in wi CVE-2002-07667.2OpenBSD 2.9 through 3.1 allows local users to cause a denial of service (resource exhaustion) and gain root privileges by filling the kernel CVE-2002-07677.2simpleinit on Linux systems does not close a read/write FIFO file descriptor before creating a child process, which allows the child process CVE-2002-07687.5Buffer overflow in lukemftp FTP client in SuSE 6.4 through 8.0, and possibly other operating systems, allows a malicious FTP server to execu CVE-2002-07696.4The web-based configuration interface for the Cisco ATA 186 Analog Telephone Adaptor allows remote attackers to bypass authentication via an CVE-2002-07705.0Quake 2 (Q2) server 3.20 and 3.21 allows remote attackers to obtain sensitive server cvar variables, obtain directory listings, and execute CVE-2002-07716.4Cross-site scripting vulnerability in viewcvs.cgi for ViewCVS 0.9.2 allows remote attackers to inject script and steal cookies via the (1) c CVE-2002-07726.4Directory traversal vulnerability in dsnmanager.asp for Hosting Controller allows remote attackers to read arbitrary files and directories v CVE-2002-077310.0imp_rootdir.asp for Hosting Controller allows remote attackers to copy or delete arbitrary files and directories via a direct request to imp CVE-2002-077410.0Hosting Controller creates a default user AdvWebadmin with a default password, which could allow remote attackers to gain privileges if the CVE-2002-07755.0browse.asp in Hosting Controller allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath par