sunsolve-cd-command-execution(8435)vdb entry
http://www.iss.net/security_center/static/8435.php CVE-2002-0436
Solaris 7.0/8 Sunsolve CD - SSCD_SunCourier.pl CGI Script Arbitrary Command Execution
Record summary
CVE-2002-0436 has a selected CVSS score of 10.0; EIP currently links 1 catalogued exploit.
Description
sscd_suncourier.pl CGI script in the Sun Sunsolve CD pack allows remote attackers to execute arbitrary commands via shell metacharacters in the email address parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBSolaris 7.0/8 Sunsolve CD - SSCD_SunCourier.pl CGI Script Arbitrary Command ExecutionExploitDB exploitby FyodorNot analyzed1 file
References
420020311 SunSolve CD cgi scripts...mailing list
http://www.securityfocus.com/archive/1/261544 4269vdb entry
http://www.securityfocus.com/bid/4269 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2002-0436