Lucene search

K
nvd[email protected]NVD:CVE-2002-0094
HistoryMar 25, 2002 - 5:00 a.m.

CVE-2002-0094

2002-03-2505:00:00
web.nvd.nist.gov
2

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.7

Confidence

High

EPSS

0.011

Percentile

84.7%

config_converters.py in BSCW (Basic Support for Cooperative Work) 3.x and versions before 4.06 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name during filename conversion.

Affected configurations

Nvd
Node
fraunhofer_fitbscwMatch3.4
OR
fraunhofer_fitbscwMatch4.0
VendorProductVersionCPE
fraunhofer_fitbscw3.4cpe:2.3:a:fraunhofer_fit:bscw:3.4:*:*:*:*:*:*:*
fraunhofer_fitbscw4.0cpe:2.3:a:fraunhofer_fit:bscw:4.0:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.7

Confidence

High

EPSS

0.011

Percentile

84.7%

Related for NVD:CVE-2002-0094