Lucene search
HistoryApr 02, 2003 - 5:00 a.m.
CVE-2002-0094
bscw
cve-2002-0094
remote command execution
software vulnerability
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.1 High
AI Score
Confidence
Low
0.013 Low
EPSS
Percentile
86.0%
config_converters.py in BSCW (Basic Support for Cooperative Work) 3.x and versions before 4.06 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name during filename conversion.
Affected configurations
Node
fraunhofer_fitbscwMatch3.4
ORfraunhofer_fitbscwMatch4.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| fraunhofer_fit:bscw | fraunhofer fit bscw | eq | 3.4 |
| fraunhofer_fit:bscw | fraunhofer fit bscw | eq | 4.0 |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.1 High
AI Score
Confidence
Low
0.013 Low
EPSS
Percentile
86.0%
Related for CVE-2002-0094