CVE-2002-0436 sscd_suncourier.pl CGI script in the Sun Sunsolve CD pack allows remote attackers to execute arbitrary commands via shell metacharacters in the email address parameter.
HighCVSS 10.0
EPSS 11.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
sscd_suncourier.pl CGI script in the Sun Sunsolve CD pack allows remote attackers to execute arbitrary commands via shell metacharacters in the email address parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun solaris | = 7.0 | No fix listed |
| sun solaris | = 8.0 | No fix listed |
| sunos | = 5.7 | No fix listed |
| sunos | = 5.8 | No fix listed |
References
- sunsolve-cd-command-execution(8435) vdb-entry vendor-advisory
- 20020311 SunSolve CD cgi scripts... mailing-list vendor-advisory
- 4269 vdb-entry vendor-advisory