CVE-2002-0488 Linux Directory Penguin traceroute.pl CGI script 1.0 allows remote attackers to execute arbitrary code via shell metacharacters in the host parameter.
HighCVSS 10.0
EPSS 6.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Linux Directory Penguin traceroute.pl CGI script 1.0 allows remote attackers to execute arbitrary code via shell metacharacters in the host parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux directory penguin traceroute | = 1.0 | No fix listed |
References
- penguin-traceroute-command-execution(8600) patch vdb-entry vendor-advisory
- www.linux-directory.com url-repurposed
- 20020321 PHP script: Penguin Traceroute, Remote Command Execution mailing-list vendor-advisory
- 4332 patch vdb-entry vendor-advisory