Lucene search

MitreCVE-2002-0437

HistoryApr 02, 2003 - 5:00 a.m.

CVE-2002-0437

2003-04-0205:00:00

mitre

web.nvd.nist.gov

cve-2002-0437

smstools

string format vulnerability

remote command execution

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.1

Confidence

Low

EPSS

0.012

Percentile

85.2%

JSON

Smsd in SMS Server Tools (SMStools) before 1.4.8 allows remote attackers to execute arbitrary commands via shell metacharacters (backquotes) in message text, as described with the term “string format vulnerability” by some sources.

Affected configurations

Nvd

Node

stefan_fringssms_server_toolsMatch1.4.6

stefan_fringssms_server_toolsMatch1.4.7

VendorProductVersionCPE
stefan_fringssms_server_tools1.4.6cpe:2.3:a:stefan_frings:sms_server_tools:1.4.6:*:*:*:*:*:*:*
stefan_fringssms_server_tools1.4.7cpe:2.3:a:stefan_frings:sms_server_tools:1.4.7:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
stefan_frings	sms_server_tools	1.4.6	cpe:2.3:a:stefan_frings:sms_server_tools:1.4.6:::::::*
stefan_frings	sms_server_tools	1.4.7	cpe:2.3:a:stefan_frings:sms_server_tools:1.4.7:::::::*

References

archives.neohapsis.com/archives/bugtraq/2002-03/0103.html

www.isis.de/members/~s.frings/smstools/history.html

www.iss.net/security_center/static/8433.php

www.securityfocus.com/bid/4268

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.1

Confidence

Low

EPSS

0.012

Percentile

85.2%

JSON

Related for CVE-2002-0437