CVE-2002-0664

Published: Oct 4, 2002Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The default Access Control Lists (ACLs) of the administration database for ZMerge 4.x and 5.x provides arbitrary users (including anonymous users) with Manager level access, which allows the users to read or modify import/export scripts.

Affected (2)

Products: Granite Software: Zmerge

Granite Software

1 product

Zmerge

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Granite Software Zmerge	Version 4.0
Granite Software Zmerge	Version 5.0

References (6)

http://marc.info/?l=bugtraq&m=103134154721846&w=2

Source: cve@mitre.org

http://www.iss.net/security_center/static/10057.php

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/5101

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=103134154721846&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.iss.net/security_center/static/10057.php

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/5101

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.