Vulnerability Details CVE-2002-0437
Smsd in SMS Server Tools (SMStools) before 1.4.8 allows remote attackers to execute arbitrary commands via shell metacharacters (backquotes) in message text, as described with the term "string format vulnerability" by some sources.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.034
EPSS Ranking 87.9%
CVSS Severity
CVSS v2 Score 10.0
References
- http://archives.neohapsis.com/archives/bugtraq/2002-03/0103.html
- http://www.isis.de/members/~s.frings/smstools/history.html
- http://www.iss.net/security_center/static/8433.php
- http://www.securityfocus.com/bid/4268
- http://archives.neohapsis.com/archives/bugtraq/2002-03/0103.html
- http://www.isis.de/members/~s.frings/smstools/history.html
- http://www.iss.net/security_center/static/8433.php
- http://www.securityfocus.com/bid/4268
Products affected by CVE-2002-0437
-
cpe:2.3:a:stefan_frings:sms_server_tools:1.4.6
-
cpe:2.3:a:stefan_frings:sms_server_tools:1.4.7