CyberSec.Space Logo
CVEブラウザに戻る

CVE-2002-1361

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0180%
EPSS Percentile20.32th
Published2002年12月23日
Last Modified2026年4月16日

Vulnerability Description

overflow.cgi CGI script in Sun Cobalt RaQ 4 with the SHP (Security Hardening Patch) installed allows remote attackers to execute arbitrary code via a POST request with shell metacharacters in the email parameter.

Affected Platforms (CPE)

🔌
Sun

Cobalt Raq 4

All versions

References & Advisories

🔗 http://marc.info/?l=bugtraq&m=103912513522807&w=2
🔗 http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/49377
🔗 http://www.cert.org/advisories/CA-2002-35.html
🔗 http://www.ciac.org/ciac/bulletins/n-025.shtml
🔗 http://www.kb.cert.org/vuls/id/810921
🔗 http://www.securityfocus.com/bid/6326
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/10776
🔗 http://marc.info/?l=bugtraq&m=103912513522807&w=2

関連する脆弱性情報

CVE-1999-040810.0

Files created from interactive shell sessions in Cobalt RaQ microservers (e.g. .bash_history) are world readable, and thus are acc...

CVE-2002-03467.5

Cross-site scripting vulnerability in Cobalt RAQ 4 allows remote attackers to execute arbitrary script as other Cobalt users via J...

CVE-2002-03487.5

service.cgi in Cobalt RAQ 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long ...

CVE-2002-03475.0

Directory traversal vulnerability in Cobalt RAQ 4 allows remote attackers to read password-protected files, and possibly files out...