Vulnerability in Cisco Tacacs\+
CVE-2002-0225
tac_plus Tacacs+ daemon F4.0.4.alpha, originally maintained by Cisco, creates files from the accounting directive with world-readable and writable permissions, which allows local users to access and modify sensitive files.
EPSS: 0.003 (25.0th percentile) — read the EPSS interpretation.
Affected products
- Cisco Tacacs\+ — versions f4.0.4alpha
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, Vendor Advisory, x_refsource_XF)