CVE-2002-1970

Description

SnortCenter 0.9.5, when configured to push Snort rules, stores the rules in a temporary file with world-readable and world-writable permissions, which allows local users to obtain usernames and passwords for the alert database servers.

References

http://www.securityfocus.com/bid/6109

http://www.iss.net/security_center/static/10540.php

http://online.securityfocus.com/archive/1/298587

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS