Back to CVE Browser

CVE-2002-1854

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1210%

EPSS Percentile0.12th

PublishedDec 31, 2002

Last ModifiedApr 16, 2026

Vulnerability Description

Rlaj whois CGI script (whois.cgi) 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain name field.

Affected Platforms (CPE)

📦

Rlaj

Rlaj Whois

= 1.0

References & Advisories

🔗 http://online.securityfocus.com/archive/1/279268

🔗 http://www.iss.net/security_center/static/9439.php

🔗 http://www.securityfocus.com/bid/5113

🔗 http://online.securityfocus.com/archive/1/279268

🔗 http://www.iss.net/security_center/static/9439.php

🔗 http://www.securityfocus.com/bid/5113

Related Vulnerabilities

CVE-2002-074710.0

Buffer overflow in lsmcode in AIX 4.3.3.

CVE-2002-136910.0

jobs.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly use the strncat function call when processing...

CVE-2002-135910.0

Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause ...

CVE-2002-000510.0

Buffer overflow in AOL Instant Messenger (AIM) 4.7.2480, 4.8.2616, and other versions allows remote attackers to execute arbitrary...