CVE-2002-0480 ISS RealSecure for Nokia devices before IPSO build 6.0.2001.141d is configured to allow a user "skank" on a machine "starscream" to become a key manager when the "first time connection" feature is ena...
HighCVSS 10.0
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ISS RealSecure for Nokia devices before IPSO build 6.0.2001.141d is configured to allow a user "skank" on a machine "starscream" to become a key manager when the "first time connection" feature is enabled and before any legitimate administrators have connected, which could allow remote attackers to gain access to the device during installation.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| iss realsecure nokia | = 6.0 | No fix listed |
References
- 20020320 NMRC Advisory - KeyManager Issue in ISS RealSecure on Nokia Appliances mailing-list
- 20020321 RE: [VulnWatch] NMRC Advisory - KeyManager Issue in ISS RealSecure on Nokia Appliances mailing-list
- 20020322 RE: NMRC Advisory: RealSecure KeyManager Issue - Further Explanation mailing-list
- 4331 vdb-entry