CVE-2002-0437 Smsd in SMS Server Tools (SMStools) before 1.4.8 allows remote attackers to execute arbitrary commands via shell metacharacters (backquotes) in message text, as described with the term "string format....
HighCVSS 10.0
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Smsd in SMS Server Tools (SMStools) before 1.4.8 allows remote attackers to execute arbitrary commands via shell metacharacters (backquotes) in message text, as described with the term "string format vulnerability" by some sources.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| stefan frings sms server tools | = 1.4.6 | No fix listed |
| stefan frings sms server tools | = 1.4.7 | No fix listed |
References
- 20020311 SMStools vulnerabilities in release before 1.4.8 mailing-list
- www.isis.de
- sms-tools-format-string(8433) vdb-entry vendor-advisory
- 4268 patch vdb-entry vendor-advisory