CVE-2002-0508

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

wwwisis 3.45 and earlier allows remote attackers to execute arbitrary commands and read files via the parameters (1) prolog or (2) epilog.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0077.html
http://online.securityfocus.com/archive/1/264682Vendor Advisory
http://online.securityfocus.com/archive/1/265456Vendor Advisory
http://www.bireme.br/security.htm
http://www.iss.net/security_center/static/8660.php
http://www.securityfocus.com/bid/4383
http://www.securityfocus.com/bid/4384Patch, Vendor Advisory
http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0077.html
http://online.securityfocus.com/archive/1/264682Vendor Advisory
http://online.securityfocus.com/archive/1/265456Vendor Advisory
http://www.bireme.br/security.htm
http://www.iss.net/security_center/static/8660.php
http://www.securityfocus.com/bid/4383
http://www.securityfocus.com/bid/4384Patch, Vendor Advisory

Timeline

Published: Aug 12, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-05095.0Transparent Network Substrate (TNS) Listener in Oracle 9i 9.0.1.1 allows remote attackers to cause a denial of service (CPU consumption) via CVE-2002-05105.0The UDP implementation in Linux 2.4.x kernels keeps the IP Identification field at 0 for all non-fragmented packets, which could allow remot CVE-2002-05117.5The default configuration of Name Service Cache Daemon (nscd) in Caldera OpenLinux 3.1 and 3.1.1 uses cached PTR records instead of consulti CVE-2002-05124.6startkde in KDE for Caldera OpenLinux 2.3 through 3.1.1 sets the LD_LIBRARY_PATH environment variable to include the current working directo CVE-2002-051310.0The PHP administration script in popper_mod 1.2.1 and earlier relies on Apache .htaccess authentication, which allows remote attackers to ga CVE-2002-05145.0PF in OpenBSD 3.0 with the return-rst rule sets the TTL to 128 in the RST packet, which allows remote attackers to determine if a port is be CVE-2002-05155.0IPFilter 3.4.25 and earlier sets a different TTL when a port is being filtered than when it is not being filtered, which allows remote attac CVE-2002-051610.0SquirrelMail 1.2.5 and earlier allows authenticated SquirrelMail users to execute arbitrary commands by modifying the THEME variable in a co CVE-2002-05177.2Buffer overflow in X11 library (libX11) on Caldera Open UNIX 8.0.0, UnixWare 7.1.1, and possibly other operating systems, allows local users CVE-2002-05185.0The SYN cache (syncache) and SYN cookie (syncookie) mechanism in FreeBSD 4.5 and earlier allows remote attackers to cause a denial of servic CVE-2002-05207.5Cross-site scripting vulnerability in functions-inc.asp for ASP-Nuke RC1 allows remote attackers to execute script as other ASP-Nuke users b CVE-2002-05215.1Cross-site scripting vulnerabilities in ASP-Nuke RC2 and earlier allow remote attackers to execute script or gain privileges as other ASP-Nu