CVE-2002-0236

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 7.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2002-05-29 · updated 2026-06-16

Description

Lucent VitalSuite 8.0 through 8.2, including VitalNet, VitalEvent, and VitalHelp/VitalAnalysis, allows remote attackers to bypass authentication via a direct HTTP request to the VsSetCookie.exe program, which returns a valid cookie for the desired user.

Affected products

Lucent Vitalanalysis: 8.0, 8.1, 8.2
Lucent Vitalevent: 8.0, 8.1, 8.2
Lucent Vitalhelp: 8.0, 8.1, 8.2
Lucent Vitalnet: 8.0, 8.1, 8.2
Lucent Vitalsuite: 8.0, 8.1, 8.2

References

http://marc.info/?l=bugtraq&m=101294507827698&w=2
http://www.iss.net/security_center/static/7936.php
http://www.securityfocus.com/bid/3784
http://marc.info/?l=bugtraq&m=101294507827698&w=2
http://www.iss.net/security_center/static/7936.php
http://www.securityfocus.com/bid/3784

Get alerted when CVE-2002-0236 or the next vulnerability affects your stack