CVE

Id
5745  
CVE No.
CVE-2002-1361  
Status
Entry  
Description
overflow.cgi CGI script in Sun Cobalt RaQ 4 with the SHP (Security Hardening Patch) installed allows remote attackers to execute arbitrary code via a POST request with shell metacharacters in the email parameter.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
31870 5745 CVE-2002-1361 BUGTRAQ:20021205 Cobalt RaQ4 Remote root exploit  View
31871 5745 CVE-2002-1361 URL:http://marc.info/?l=bugtraq&m=103912513522807&w=2  View
31872 5745 CVE-2002-1361 SUNALERT:49377  View
31873 5745 CVE-2002-1361 URL:http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/49377  View
31874 5745 CVE-2002-1361 CERT:CA-2002-35  View
31875 5745 CVE-2002-1361 URL:http://www.cert.org/advisories/CA-2002-35.html  View
31876 5745 CVE-2002-1361 CERT-VN:VU#810921  View
31877 5745 CVE-2002-1361 URL:http://www.kb.cert.org/vuls/id/810921  View
31878 5745 CVE-2002-1361 CIAC:N-025  View
31879 5745 CVE-2002-1361 URL:http://www.ciac.org/ciac/bulletins/n-025.shtml  View
31880 5745 CVE-2002-1361 BID:6326  View
31881 5745 CVE-2002-1361 URL:http://www.securityfocus.com/bid/6326  View
31882 5745 CVE-2002-1361 XF:cobalt-shp-overflow-privileges(10776)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63959 JVNDB-2002-000286 Sun Cobalt RaQ4 の SHP における任意のコマンドを実行される脆弱性 Sun Cobalt RaQ4 にインストール可能な SHP (Security Hardening Product) には、ユーザからの入力を適切にフィルタリングしない cgi スクリプトが存在し、特に overflow.cgi には email 変数への入力値を適切にフィルタリングしない脆弱性が存在します。 CVE-2002-1361 5745 10 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000286.html  View