Description
The Office Web Components (OWC) package installer for Microsoft Commerce Server 2000 allows remote attackers to execute commands by passing the commands as input to the OWC package installer, aka "OWC Package Command Execution".
References (4)
Core 4
Core References
Vendor Advisory vendor-advisory
x_refsource_ms
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-033
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/5111
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/5170
Third Party Advisory vdb-entry
x_refsource_xf
http://www.iss.net/security_center/static/9425.php
Scores
EPSS
0.1938
EPSS Percentile
97.1%
Details
Status
published
Products (1)
microsoft/commerce_server
2000 (3 CPE variants)
Published
Jul 03, 2002
Tracked Since
Feb 18, 2026