Lucene search

[email protected]CVE-2003-1538

HistoryDec 31, 2003 - 5:00 a.m.

CVE-2003-1538

2003-12-3105:00:00

CWE-20

[email protected]

web.nvd.nist.gov

cve-2003-1538

susehelp

suse linux

remote code execution

shell metacharacters

security vulnerability

7.9 High

AI Score

Confidence

Low

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.003 Low

EPSS

Percentile

65.5%

JSON

susehelp in SuSE Linux 8.1, Enterprise Server 8, Office Server, and Openexchange Server 4 does not properly filter shell metacharacters, which allows remote attackers to execute arbitrary commands via CGI queries.

CPENameOperatorVersion
suse:office_serversuse office servereq*
suse:suse_linuxsuse suse linuxeq8
suse:suse_linux_openexchange_serversuse suse linux openexchange servereq4.0
suse:suse_linuxsuse suse linuxeq8.1

CPE	Name	Operator	Version
suse:office_server	suse office server	eq	*
suse:suse_linux	suse suse linux	eq	8
suse:suse_linux_openexchange_server	suse suse linux openexchange server	eq	4.0
suse:suse_linux	suse suse linux	eq	8.1

References

secunia.com/advisories/7906

www.novell.com/linux/security/advisories/2003_005_susehelp.html

www.securitytracker.com/id?1005954

7.9 High

AI Score

Confidence

Low

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.003 Low

EPSS

Percentile

65.5%

JSON

Related for CVE-2003-1538

cvelist1 suse1