Lucene search

[email protected]CVE-2002-0437

HistoryApr 02, 2003 - 5:00 a.m.

CVE-2002-0437

2003-04-0205:00:00

[email protected]

web.nvd.nist.gov

cve-2002-0437

smstools

string format vulnerability

remote command execution

nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8.1 High

AI Score

Confidence

Low

0.019 Low

EPSS

Percentile

88.8%

JSON

Smsd in SMS Server Tools (SMStools) before 1.4.8 allows remote attackers to execute arbitrary commands via shell metacharacters (backquotes) in message text, as described with the term “string format vulnerability” by some sources.

Affected configurations

NVD

Node

stefan_fringssms_server_toolsMatch1.4.6

stefan_fringssms_server_toolsMatch1.4.7

CPENameOperatorVersion
stefan_frings:sms_server_toolsstefan frings sms server toolseq1.4.6
stefan_frings:sms_server_toolsstefan frings sms server toolseq1.4.7

CPE	Name	Operator	Version
stefan_frings:sms_server_tools	stefan frings sms server tools	eq	1.4.6
stefan_frings:sms_server_tools	stefan frings sms server tools	eq	1.4.7

References

archives.neohapsis.com/archives/bugtraq/2002-03/0103.html

www.isis.de/members/~s.frings/smstools/history.html

www.iss.net/security_center/static/8433.php

www.securityfocus.com/bid/4268

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8.1 High

AI Score

Confidence

Low

0.019 Low

EPSS

Percentile

88.8%

JSON

Related for CVE-2002-0437

cvelist1 nvd1