CVE-2002-1553

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Cisco ONS15454 and ONS15327 running ONS before 3.4 allows remote attackers to modify the system configuration and delete files by establishing an FTP connection to the TCC, TCC+ or XTC using a username and password that does not exist.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.cisco.com/warp/public/707/ons-multiple-vuln-pub.shtmlPatch, Vendor Advisory
http://www.iss.net/security_center/static/10505.phpPatch, Vendor Advisory
http://www.securityfocus.com/bid/6076Patch, Vendor Advisory
http://www.cisco.com/warp/public/707/ons-multiple-vuln-pub.shtmlPatch, Vendor Advisory
http://www.iss.net/security_center/static/10505.phpPatch, Vendor Advisory
http://www.securityfocus.com/bid/6076Patch, Vendor Advisory

Timeline

Published: Mar 31, 2003
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-15544.6Cisco ONS15454 and ONS15327 running ONS before 3.4 stores usernames and passwords in cleartext in the image database for the TCC, TCC+ or XT CVE-2002-15555.0Cisco ONS15454 and ONS15327 running ONS before 3.4 uses a "public" SNMP community string that cannot be changed, which allows remote attacke CVE-2002-15565.0Cisco ONS15454 and ONS15327 running ONS before 3.4 allows attackers to cause a denial of service (reset) via an HTTP request to the TCC, TCC CVE-2002-15575.0Cisco ONS15454 and ONS15327 running ONS before 3.4 allows attackers to cause a denial of service (reset to TCC, TCC+, TCCi or XTC) via a mal CVE-2002-155810.0Cisco ONS15454 and ONS15327 running ONS before 3.4 have an account for the VxWorks Operating System in the TCC, TCC+ and XTC that cannot be CVE-2002-15595.0Directory traversal vulnerability in ion-p.exe (aka ion-p) allows remote attackers to read arbitrary files via (1) C: (drive letter) or (2) CVE-2002-156010.0index.php in gBook 1.4 allows remote attackers to bypass authentication and gain administrative privileges by setting the login parameter to CVE-2002-15615.0The RPC component in Windows 2000, Windows NT 4.0, and Windows XP allows remote attackers to cause a denial of service (disabled RPC service CVE-2002-15625.0Directory traversal vulnerability in thttpd, when using virtual hosting, allows remote attackers to read arbitrary files via .. (dot dot) se CVE-2002-15631.2stunnel 4.0.3 and earlier allows attackers to cause a denial of service (crash) via SIGCHLD signal handler race conditions that cause an inc CVE-2002-15645.0Internet Explorer 5.5 and 6.0 allows remote attackers to steal potentially sensitive information from cookies via a cookie that contains scr CVE-2002-15657.5Buffer overflow in url_filename function for wget 1.8.1 allows attackers to cause a denial of service (segmentation fault) and possibly exec