CVE-2002-0812

MediumCVSS 6.4/10Last modified Jun 16, 2026

Description

Information leak in Compaq WL310, and the Orinoco Residential Gateway access point it is based on, uses a system identification string as a default SNMP read/write community string, which allows remote attackers to obtain and modify sensitive configuration information by querying for the identification string.

Metrics

CVSS 2.0 6.4/10AV:N/AC:L/Au:N/C:P/I:P/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0066.htmlBroken Link
http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0075.htmlBroken Link
http://www.iss.net/security_center/static/9810.phpBroken Link
http://www.securityfocus.com/bid/5436Third Party Advisory, VDB Entry
http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0066.htmlBroken Link
http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0075.htmlBroken Link
http://www.iss.net/security_center/static/9810.phpBroken Link
http://www.securityfocus.com/bid/5436Third Party Advisory, VDB Entry

Timeline

Published: Aug 12, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-08137.1Heap-based buffer overflow in the TFTP server capability in Cisco IOS 11.1, 11.2, and 11.3 allows remote attackers to cause a denial of serv CVE-2002-08147.5Buffer overflow in VMware Authorization Service for VMware GSX Server 2.0.0 build-2050 allows remote authenticated users to execute arbitrar CVE-2002-08157.5The Javascript "Same Origin Policy" (SOP), as implemented in (1) Netscape, (2) Mozilla, and (3) Internet Explorer, allows a remote web serve CVE-2002-08167.2Buffer overflow in su in Tru64 Unix 5.x allows local users to gain root privileges via a long username and argument.CVE-2002-08177.2Format string vulnerability in super for Linux allows local users to gain root privileges via a long command line argument.CVE-2002-08187.5wwwoffled in World Wide Web Offline Explorer (WWWOFFLE) allows remote attackers to cause a denial of service and possibly execute arbitrary CVE-2002-08197.2Format string vulnerability in artsd, when called by artswrapper, allows local users to gain privileges via format strings in the -a argumen CVE-2002-08207.2FreeBSD kernel 4.6 and earlier closes the file descriptors 0, 1, and 2 after they have already been assigned to /dev/null when the descripto CVE-2002-08217.5Buffer overflows in Ethereal 0.9.4 and earlier allow remote attackers to cause a denial of service or execute arbitrary code via (1) the BGP CVE-2002-08227.5Ethereal 0.9.4 and earlier allows remote attackers to cause a denial of service and possibly excecute arbitrary code via the (1) SOCKS, (2) CVE-2002-08237.5Buffer overflow in Winhlp32.exe allows remote attackers to execute arbitrary code via an HTML document that calls the HTML Help ActiveX cont CVE-2002-08246.9BSD pppd allows local users to change the permissions of arbitrary files via a symlink attack on a file that is specified as a tty device.