Vulnerability Details CVE-2002-1874
astrocam.cgi in AstroCam 0.9-1-1 through 1.4.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request. NOTE: earlier disclosures stated that the affected versions were 1.7.1 through 2.1.2, but the vendor explicitly stated that these were incorrect.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.016
EPSS Ranking 81.2%
CVSS Severity
CVSS v2 Score 10.0
References
- http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup
- http://securitytracker.com/id?1005523
- http://www.iss.net/security_center/static/10538.php
- http://www.securityfocus.com/bid/6105
- http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup
- http://securitytracker.com/id?1005523
- http://www.iss.net/security_center/static/10538.php
- http://www.securityfocus.com/bid/6105
Products affected by CVE-2002-1874
-
cpe:2.3:a:astrocam:astrocam:0.9-1-1
-
cpe:2.3:a:astrocam:astrocam:0.9-5-1
-
cpe:2.3:a:astrocam:astrocam:0.9-7-3
-
cpe:2.3:a:astrocam:astrocam:1.0.1
-
cpe:2.3:a:astrocam:astrocam:1.4