Security Advisory

CVE-2002-0225

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2002-05-03 04:00:00
Last updated 2024-08-08 02:42:28
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

tac_plus Tacacs+ daemon F4.0.4.alpha, originally maintained by Cisco, creates files from the accounting directive with world-readable and writable permissions, which allows local users to access and modify sensitive files.