CVE-2002-0225: Cisco Tacacs+

Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days.

tac_plus Tacacs+ daemon F4.0.4.alpha, originally maintained by Cisco, creates files from the accounting directive with world-readable and writable permissions, which allows local users to access and modify sensitive files.

Affected products

• Cisco Tacacs+: version f4.0.4alpha only

Published 2002-05-16. Last modified 2026-06-16.