NVD

Id
73231  
Name
CVE-2003-0084  
Description
mod_auth_any package in Red Hat Enterprise Linux 2.1 and other operating systems does not properly escape arguments when calling other programs, which allows attackers to execute arbitrary commands via shell metacharacters.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2003-05-12  
Modified Date
2017-07-10  
Seq
2003-0084  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
377034 73231 CVE-2003-0084 RHSA-2003:114  View
377035 73231 CVE-2003-0084 N-090  View
377036 73231 CVE-2003-0084 http://www.itlab.musc.edu/webNIS/mod_auth_any.html  View
377037 73231 CVE-2003-0084 RHSA-2003:113  View
377038 73231 CVE-2003-0084 7448  View
377039 73231 CVE-2003-0084 modauthany-command-execution(11893)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63414 JVNDB-2003-000140 Apache HTTP Server の mod_auth_any における任意のコマンドを実行される脆弱性 Apache HTTP Server の mod_auth_any には、引数をシェルに引き渡す処理の際に、引数に対する妥当性のチェックが適切に行われない脆弱性が存在します。 CVE-2003-0084 6912 CVE-2003-0084 73231 7.5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000140.html 2003-05-02 2007-04-01 View