6.4med
CVE-2002-2265
Unspecified vulnerability in LDAP Module in System Authentication of Open Source Internet Solutions (OSIS) 5.4 running on Tru64 UNIX 4.0G a…
Published 23 y ago · modified 4 mo ago · JSON
CVSS
6.4
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
1.2%
percentile 69%
Public exploits
0
none known
Summary
Unspecified vulnerability in LDAP Module in System Authentication of Open Source Internet Solutions (OSIS) 5.4 running on Tru64 UNIX 4.0G and 4.0F allows remote attackers to gain access to arbitrary files or gain privileges via unknown attack vectors.
Exploit prediction (EPSS)
1.22% probability of exploitation in the next 30 days, higher than 69% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 6.4 | AV:N/AC:L/Au:N/C:P/I:P/A:N |
Classification
- Weakness
- CWE-264 Permissions, Privileges, and Access Controls
References
- exchange.xforce.ibmcloud.com /vulnerabilities/10703 · vdb-entry, x_refsource_XF, x_transferred
- archives.neohapsis.com /archives/compaq/2002-q4/0014.html · vendor-advisory, x_refsource_HP, x_transferred
- securityfocus.com /bid/6174 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2002-2265
- NVD: CVE-2002-2265
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.