CVE-2003-1538 susehelp in SuSE Linux 8.1, Enterprise Server 8, Office Server, and Openexchange Server 4 does not properly filter shell metacharacters, which allows remote attackers to execute arbitrary commands via...
MediumCVSS 6.4
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
susehelp in SuSE Linux 8.1, Enterprise Server 8, Office Server, and Openexchange Server 4 does not properly filter shell metacharacters, which allows remote attackers to execute arbitrary commands via CGI queries.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| suse linux openexchange server | = 4.0 | No fix listed |
| SUSE office server | All versions | No fix listed |
| suse linux | = 8 | No fix listed |
| suse linux | = 8.1 | No fix listed |
References
- 7906 patch third-party-advisory vendor-advisory
- SUSE-SA:2003:005 vendor-advisory
- 1005954 patch vdb-entry