Lucene search
HistoryMay 31, 2002 - 4:00 a.m.
CVE-2002-0306
cve-2002-0306
ans.pl
ans 2.11
remote attack
arbitrary commands
shell metacharacters
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.1 High
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
78.2%
ans.pl in Avenger’s News System (ANS) 2.11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the p (plugin) parameter.
Affected configurations
Node
avengers_news_systemavengers_news_systemMatch2.01
ORavengers_news_systemavengers_news_systemMatch2.11
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.1 High
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
78.2%
Related for CVE-2002-0306