CVE-2002-2425 Sun AnswerBook2 1.2 through 1.4.2 allows remote attackers to execute administrative scripts such as (1) AdminViewError and (2) AdminAddadmin via a direct request.
HighCVSS 10.0
EPSS 3.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Sun AnswerBook2 1.2 through 1.4.2 allows remote attackers to execute administrative scripts such as (1) AdminViewError and (2) AdminAddadmin via a direct request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun solaris answerbook2 | = 1.2 | No fix listed |
| sun solaris answerbook2 | = 1.3 | No fix listed |
| sun solaris answerbook2 | = 1.4 | No fix listed |
| sun solaris answerbook2 | = 1.4.1 | No fix listed |
| sun solaris answerbook2 | = 1.4.2 | No fix listed |
References
- 20020801 Sun AnswerBook2 format string and other vulnerabilities exploit mailing-list
- answerbook2-admin-scripts-access(9756) patch vdb-entry
- 5383 exploit vdb-entry