CVE-2004-1456

CVStrac - Command Injection

Title source: llm
STIX 2.1

Description

filediff in CVStrac allows remote attackers to execute arbitrary commands via shell metacharacters in rcsinfo.

Exploits (1)

exploitdb WORKING POC VERIFIED
by anonymous · textremotelinux
https://www.exploit-db.com/exploits/379

References (8)

Core 8
Core References
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/10878
Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/770816
Exploit vdb-entry x_refsource_osvdb
http://www.osvdb.org/8373
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/16929
Exploit x_refsource_confirm
http://www.cvstrac.org/cvstrac/tktview?tn=339
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=109173359428253&w=2
Patch third-party-advisory x_refsource_secunia
http://secunia.com/advisories/12090/

Scores

EPSS 0.5421
EPSS Percentile 98.0%

Details

Status published
Products (4)
cvstrac/cvstrac 1.1
cvstrac/cvstrac 1.1.1
cvstrac/cvstrac 1.1.2
cvstrac/cvstrac 1.1.3
Published Dec 31, 2004
Tracked Since Feb 18, 2026