Description
FTP service in Alcatel OmniPCX 4400 allows the "halt" user to gain root privileges by modifying root's .profile file.
References
- 20020219 Security BugWare : Alcatel 4400 PBX hack mailing-list
- omnipcx-ftp-root-access(8225) vdb-entry
Unscored
CVE-2002-0293
EUVD-2002-0290GHSA-6882-r4ww-m87g
FTP service in Alcatel OmniPCX 4400 allows the "halt" user to gain root privileges by modifying root's .profile file.
Published May 3, 2002 · Updated Aug 8, 2024 · Assigned by mitre