Back to CVE Browser

CVE-2002-1874

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0900%

EPSS Percentile21.22th

PublishedDec 31, 2002

Last ModifiedApr 16, 2026

Vulnerability Description

astrocam.cgi in AstroCam 0.9-1-1 through 1.4.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request. NOTE: earlier disclosures stated that the affected versions were 1.7.1 through 2.1.2, but the vendor explicitly stated that these were incorrect.

Affected Platforms (CPE)

📦

Astrocam

Astrocam

= 0.9-1-1

📦

Astrocam

Astrocam

= 0.9-5-1

📦

Astrocam

Astrocam

= 0.9-7-3

📦

Astrocam

Astrocam

= 1.0.1

📦

Astrocam

Astrocam

= 1.4

References & Advisories

🔗 http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup

🔗 http://securitytracker.com/id?1005523

🔗 http://www.iss.net/security_center/static/10538.php

🔗 http://www.securityfocus.com/bid/6105

🔗 http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup

🔗 http://securitytracker.com/id?1005523

🔗 http://www.iss.net/security_center/static/10538.php

🔗 http://www.securityfocus.com/bid/6105

Related Vulnerabilities

CVE-2007-14267.8

The web interface in AstroCam 2.0.0 through 2.6.5 allows remote attackers to cause a denial of service (daemon shutdown) via reque...

CVE-2008-20754.3

Cross-site scripting (XSS) vulnerability in pic.php in AstroCam 2.5.0 through 2.7.3 allows remote attackers to inject arbitrary we...

CVE-2002-135910.0

Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause ...

CVE-2002-136910.0

jobs.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly use the strncat function call when processing...