CVE-2002-1554

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

Cisco ONS15454 and ONS15327 running ONS before 3.4 stores usernames and passwords in cleartext in the image database for the TCC, TCC+ or XTC, which could allow attackers to gain privileges by obtaining the passwords from the image database or a backup.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.cisco.com/warp/public/707/ons-multiple-vuln-pub.shtmlPatch, Vendor Advisory
http://www.iss.net/security_center/static/10506.phpPatch, Vendor Advisory
http://www.securityfocus.com/bid/6078Patch, Vendor Advisory
http://www.cisco.com/warp/public/707/ons-multiple-vuln-pub.shtmlPatch, Vendor Advisory
http://www.iss.net/security_center/static/10506.phpPatch, Vendor Advisory
http://www.securityfocus.com/bid/6078Patch, Vendor Advisory

Timeline

Published: Mar 31, 2003
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-15555.0Cisco ONS15454 and ONS15327 running ONS before 3.4 uses a "public" SNMP community string that cannot be changed, which allows remote attacke CVE-2002-15565.0Cisco ONS15454 and ONS15327 running ONS before 3.4 allows attackers to cause a denial of service (reset) via an HTTP request to the TCC, TCC CVE-2002-15575.0Cisco ONS15454 and ONS15327 running ONS before 3.4 allows attackers to cause a denial of service (reset to TCC, TCC+, TCCi or XTC) via a mal CVE-2002-155810.0Cisco ONS15454 and ONS15327 running ONS before 3.4 have an account for the VxWorks Operating System in the TCC, TCC+ and XTC that cannot be CVE-2002-15595.0Directory traversal vulnerability in ion-p.exe (aka ion-p) allows remote attackers to read arbitrary files via (1) C: (drive letter) or (2) CVE-2002-156010.0index.php in gBook 1.4 allows remote attackers to bypass authentication and gain administrative privileges by setting the login parameter to CVE-2002-15615.0The RPC component in Windows 2000, Windows NT 4.0, and Windows XP allows remote attackers to cause a denial of service (disabled RPC service CVE-2002-15625.0Directory traversal vulnerability in thttpd, when using virtual hosting, allows remote attackers to read arbitrary files via .. (dot dot) se CVE-2002-15631.2stunnel 4.0.3 and earlier allows attackers to cause a denial of service (crash) via SIGCHLD signal handler race conditions that cause an inc CVE-2002-15645.0Internet Explorer 5.5 and 6.0 allows remote attackers to steal potentially sensitive information from cookies via a cookie that contains scr CVE-2002-15657.5Buffer overflow in url_filename function for wget 1.8.1 allows attackers to cause a denial of service (segmentation fault) and possibly exec CVE-2002-15665.0netris 0.5, and possibly other versions before 0.52, when running with the -w (wait) option, allows remote attackers to cause a denial of se