CVE-2002-1825 Format string vulnerability in PerlRTE_example1.pl in WASD 7.1, 7.2.0 through 7.2.3, and 8.0.0 allows remote attackers to execute arbitrary commands or crash the server via format strings in the $name...
MediumCVSS 6.4
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in PerlRTE_example1.pl in WASD 7.1, 7.2.0 through 7.2.3, and 8.0.0 allows remote attackers to execute arbitrary commands or crash the server via format strings in the $name variable.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wasd http server | = 7.1 | No fix listed |
| wasd http server | = 7.2 | No fix listed |
| wasd http server | = 7.2.1 | No fix listed |
| wasd http server | = 7.2.2 | No fix listed |
| wasd http server | = 7.2.3 | No fix listed |
| wasd http server | = 8.0 | No fix listed |
References
- wasd.vsm.com.au vendor-advisory
- wasd-http-perlrte-format-string(10213) patch vdb-entry
- 21288 vdb-entry
- 20020926 remote SYSTEM compromise in WASD OpenVMS http server mailing-list
- 5811 patch vdb-entry
- www.teaser.fr vendor-advisory