CVE-2002-0508 wwwisis 3.45 and earlier allows remote attackers to execute arbitrary commands and read files via the parameters (1) prolog or (2) epilog.
HighCVSS 10.0
EPSS 5.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
wwwisis 3.45 and earlier allows remote attackers to execute arbitrary commands and read files via the parameters (1) prolog or (2) epilog.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wwwisis | = 3.3 | No fix listed |
| wwwisis | = 3.45 | No fix listed |
References
- 20020328 [VulnWatch] vuln in wwwisis: remote command execution and get files mailing-list
- 20020328 vuln in wwwisis: remote command execution and get files mailing-list vendor-advisory
- 20020402 RE: [VulnWatch] vuln in wwwisis: remote command execution and get files mailing-list vendor-advisory
- www.bireme.br
- wwwisis-remote-command-execution(8660) vdb-entry
- 4383 vdb-entry
- 4384 patch vdb-entry vendor-advisory