CVE-2002-1874 astrocam.cgi in AstroCam 0.9-1-1 through 1.4.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request. NOTE: earlier disclosures stated that the affected ver...
HighCVSS 10.0
EPSS 3.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
astrocam.cgi in AstroCam 0.9-1-1 through 1.4.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request. NOTE: earlier disclosures stated that the affected versions were 1.7.1 through 2.1.2, but the vendor explicitly stated that these were incorrect.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| astrocam | = 0.9-1-1-beta | No fix listed |
| astrocam | = 0.9-5-1-beta | No fix listed |
| astrocam | = 0.9-7-3-beta | No fix listed |
| astrocam | = 1.0.1-beta | No fix listed |
| astrocam | = 1.4-beta | No fix listed |
References
- astrocam.svn.sourceforge.net
- 1005523 patch vdb-entry
- astrocam-cgi-command-execution(10538) patch vdb-entry
- 6105 patch vdb-entry