{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T11:17:55Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","advisory":{"id":"cisco-sa-20020410-solaris-bin-login","slug":"cisco-sa-20020410-solaris-bin-login","vendor":"Cisco","title":"Solaris /bin/login Vulnerability","summary":"This advisory describes a vulnerability that affects Cisco products and applications that are installed on the Solaris operating system, and is based on the vulnerability of an common service within the Solaris operating system, not due to a defect of the Cisco product or application. A vulnerability in the \"/bin/login\" program was discovered that enables an attacker to execute arbitrary code under Solaris OS. This vulnerability was discovered and publicly announced by Internet Security Systems Inc. All Cisco products and applications that are installed on Solaris OS are considered vulnerable to the underlying operating system vulnerability, unless steps have been taken to disable access services such as \"bin/login.\" We are investigating other Solaris-based products. This vulnerability can be mitigated in many cases (not all), by limiting interactive logins to trusted hosts using access control list (ACL) or other mechanisms such as firewalls. This advisory is available at the https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20020410-solaris-bin-login.","severity":"NA","published_at":"2002-04-10T16:00:00Z","updated_at":"2002-04-10T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20020410-solaris-bin-login","csaf_url":"https://sec.cloudapps.cisco.com/security/center/contentjson/CiscoSecurityAdvisory/cisco-sa-20020410-solaris-bin-login/csaf/cisco-sa-20020410-solaris-bin-login.json","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"cve_count":2,"visible_product_count":5,"public_evidence_count":10,"kev_count":0,"highest_epss":0.02099},"cves":[{"id":"CVE-2002-1689","kev":false,"epss":{"score":0.02099,"percentile":0.79652,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"}},{"id":"CVE-2001-0797","kev":false}],"public_evidence":[{"product":{"name":"Cisco BAMS - Billing and Management Server","slug":"cisco-bams-billing-and-management-server","vendor":"Cisco"},"cve":{"id":"CVE-2002-1689"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:37:41Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco BAMS - Billing and Management Server","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.02099,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2002-04-10T16:00:00Z","updated_at":"2002-04-10T16:00:00Z","advisory_updated_at":"2002-04-10T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20020410-solaris-bin-login","row_display_order":1},{"product":{"name":"Cisco Intrusion Detection System (IDS)","slug":"cisco-intrusion-detection-system-ids","vendor":"Cisco"},"cve":{"id":"CVE-2002-1689"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:37:41Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Intrusion Detection System (IDS)","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.02099,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2002-04-10T16:00:00Z","updated_at":"2002-04-10T16:00:00Z","advisory_updated_at":"2002-04-10T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20020410-solaris-bin-login","row_display_order":2},{"product":{"name":"Cisco SC 2200 Signaling Controller","slug":"cisco-sc-2200-signaling-controller","vendor":"Cisco"},"cve":{"id":"CVE-2002-1689"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:37:41Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco SC 2200 Signaling Controller","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.02099,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2002-04-10T16:00:00Z","updated_at":"2002-04-10T16:00:00Z","advisory_updated_at":"2002-04-10T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20020410-solaris-bin-login","row_display_order":3},{"product":{"name":"Cisco Virtual Switch Controller VSC3000","slug":"cisco-virtual-switch-controller-vsc3000","vendor":"Cisco"},"cve":{"id":"CVE-2002-1689"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:37:41Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Virtual Switch Controller VSC3000","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.02099,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2002-04-10T16:00:00Z","updated_at":"2002-04-10T16:00:00Z","advisory_updated_at":"2002-04-10T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20020410-solaris-bin-login","row_display_order":4},{"product":{"name":"Cisco Voice Services Provisioning Tool (VSPT)","slug":"cisco-voice-services-provisioning-tool-vspt","vendor":"Cisco"},"cve":{"id":"CVE-2002-1689"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:37:41Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Voice Services Provisioning Tool (VSPT)","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.02099,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2002-04-10T16:00:00Z","updated_at":"2002-04-10T16:00:00Z","advisory_updated_at":"2002-04-10T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20020410-solaris-bin-login","row_display_order":5},{"product":{"name":"Cisco BAMS - Billing and Management Server","slug":"cisco-bams-billing-and-management-server","vendor":"Cisco"},"cve":{"id":"CVE-2001-0797"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:37:41Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco BAMS - Billing and Management Server","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"published_at":"2002-04-10T16:00:00Z","updated_at":"2002-04-10T16:00:00Z","advisory_updated_at":"2002-04-10T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20020410-solaris-bin-login","row_display_order":6},{"product":{"name":"Cisco Intrusion Detection System (IDS)","slug":"cisco-intrusion-detection-system-ids","vendor":"Cisco"},"cve":{"id":"CVE-2001-0797"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:37:41Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Intrusion Detection System (IDS)","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"published_at":"2002-04-10T16:00:00Z","updated_at":"2002-04-10T16:00:00Z","advisory_updated_at":"2002-04-10T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20020410-solaris-bin-login","row_display_order":7},{"product":{"name":"Cisco SC 2200 Signaling Controller","slug":"cisco-sc-2200-signaling-controller","vendor":"Cisco"},"cve":{"id":"CVE-2001-0797"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:37:41Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco SC 2200 Signaling Controller","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"published_at":"2002-04-10T16:00:00Z","updated_at":"2002-04-10T16:00:00Z","advisory_updated_at":"2002-04-10T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20020410-solaris-bin-login","row_display_order":8},{"product":{"name":"Cisco Virtual Switch Controller VSC3000","slug":"cisco-virtual-switch-controller-vsc3000","vendor":"Cisco"},"cve":{"id":"CVE-2001-0797"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:37:41Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Virtual Switch Controller VSC3000","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"published_at":"2002-04-10T16:00:00Z","updated_at":"2002-04-10T16:00:00Z","advisory_updated_at":"2002-04-10T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20020410-solaris-bin-login","row_display_order":9},{"product":{"name":"Cisco Voice Services Provisioning Tool (VSPT)","slug":"cisco-voice-services-provisioning-tool-vspt","vendor":"Cisco"},"cve":{"id":"CVE-2001-0797"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:37:41Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Voice Services Provisioning Tool (VSPT)","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"published_at":"2002-04-10T16:00:00Z","updated_at":"2002-04-10T16:00:00Z","advisory_updated_at":"2002-04-10T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20020410-solaris-bin-login","row_display_order":10}]}