CVE-2002-0299 CNet CatchUp before 1.3.1 allows attackers to execute arbitrary code via a .RVP file that creates a file with an arbitrary extension (such as .BAT), which is executed during a scan.
HighCVSS 7.6
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
CNet CatchUp before 1.3.1 allows attackers to execute arbitrary code via a .RVP file that creates a file with an arbitrary extension (such as .BAT), which is executed during a scan.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cnet catchup | <= 1.3 | No fix listed |
References
- 20020220 CNet CatchUp arbitrary code execution mailing-list
- cnet-catchup-gain-privileges(8035) vdb-entry
- 3975 vdb-entry