CVE-2002-1970

LOW 2.1CVE-2002-1970 · Published 31/12/2002 · updated 16/06/2026

In short

CVE-2002-1970 is a LOW (CVSS 2.1) vulnerability affecting snortcenter (snortcenter).
Chance of exploitation in the next 30 days (EPSS): 0.38%, higher than 32.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
snortcenter snortcenter	`= 0.9.5`	No fix yet

Description

SnortCenter 0.9.5, when configured to push Snort rules, stores the rules in a temporary file with world-readable and world-writable permissions, which allows local users to obtain usernames and passwords for the alert database servers.

References

online.securityfocus.com/archive/1/298587 · Patch
iss.net/security_center/static/10540.php · Patch
securityfocus.com/bid/6109 · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free