Lucene search

[email protected]CVE-2003-1538

HistoryOct 03, 2022 - 4:15 p.m.

CVE-2003-1538

2022-10-0316:15:42

CWE-20

[email protected]

web.nvd.nist.gov

cve-2003-1538

susehelp

suse linux

remote code execution

shell metacharacters

security vulnerability

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

7.7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.7%

JSON

susehelp in SuSE Linux 8.1, Enterprise Server 8, Office Server, and Openexchange Server 4 does not properly filter shell metacharacters, which allows remote attackers to execute arbitrary commands via CGI queries.

Affected configurations

NVD

Node

susesuse_linux_openexchange_serverMatch4.0

suseoffice_server

susesuse_linuxMatch8enterprise_server

susesuse_linuxMatch8.1

CPENameOperatorVersion
suse:suse_linux_openexchange_serversuse suse linux openexchange servereq4.0
suse:office_serversuse office servereq*
suse:suse_linuxsuse suse linuxeq8
suse:suse_linuxsuse suse linuxeq8.1

CPE	Name	Operator	Version
suse:suse_linux_openexchange_server	suse suse linux openexchange server	eq	4.0
suse:office_server	suse office server	eq	*
suse:suse_linux	suse suse linux	eq	8
suse:suse_linux	suse suse linux	eq	8.1

References

secunia.com/advisories/7906

www.novell.com/linux/security/advisories/2003_005_susehelp.html

www.securitytracker.com/id?1005954

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

7.7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.7%

JSON

Related for CVE-2003-1538

suse1 nvd1 cvelist1