Unauthenticated Remote Access to Root File System in Zaurus PDAs SL-5000D and SL-5500

Unauthenticated Remote Access to Root File System in Zaurus PDAs SL-5000D and SL-5500

CVE-2002-1974 · HIGH Severity

AV:N/AC:L/AU:N/C:C/I:C/A:C

The FTP service in Zaurus PDAs SL-5000D and SL-5500 does not require authentication, which allows remote attackers to access the file system as root.

Learn more about our Web Application Penetration Testing UK.