Lucene search

MitreCVE-2002-0436

HistoryJul 26, 2002 - 4:00 a.m.

CVE-2002-0436

2002-07-2604:00:00

mitre

web.nvd.nist.gov

cve-2002-0436

sun sunsolve cd

remote attack

arbitrary command execution

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

High

EPSS

0.017

Percentile

87.8%

JSON

sscd_suncourier.pl CGI script in the Sun Sunsolve CD pack allows remote attackers to execute arbitrary commands via shell metacharacters in the email address parameter.

Affected configurations

Nvd

Node

sunsolarisMatch7.0x86

sunsolarisMatch8.0x86

sunsunosMatch5.7

sunsunosMatch5.8

VendorProductVersionCPE
sunsolaris7.0cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*
sunsolaris8.0cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*
sunsunos5.7cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*
sunsunos5.8cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sun	solaris	7.0	cpe:2.3:o:sun:solaris:7.0::x86:::::
sun	solaris	8.0	cpe:2.3:o:sun:solaris:8.0::x86:::::
sun	sunos	5.7	cpe:2.3:o:sun:sunos:5.7:::::::*
sun	sunos	5.8	cpe:2.3:o:sun:sunos:5.8:::::::*

References

www.iss.net/security_center/static/8435.php

www.securityfocus.com/archive/1/261544

www.securityfocus.com/bid/4269

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

High

EPSS

0.017

Percentile

87.8%

JSON

Related for CVE-2002-0436