CVE-2002-0849: Cisco Iscsi Driver

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

Linux-iSCSI iSCSI implementation installs the iscsi.conf file with world-readable permissions on some operating systems, including Red Hat Linux Limbo Beta #1, which could allow local users to gain privileges by reading the cleartext CHAP password.

Affected products

  • Cisco Iscsi Driver: any version

Published 2002-08-12. Last modified 2026-06-16.