CVEvulnerability
CVE-2002-0437
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2002-07-26
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Smsd in SMS Server Tools (SMStools) before 1.4.8 allows remote attackers to execute arbitrary commands via shell metacharacters (backquotes) in message text, as described with the term "string format vulnerability" by some sources.
Affected configurations
• stefan frings sms server tools 1.4.6
• stefan frings sms server tools 1.4.7
References
- http://archives.neohapsis.com/archives/bugtraq/2002-03/0103.html archives.neohapsis.com
- http://www.isis.de/members/~s.frings/smstools/history.html www.isis.de
- http://www.iss.net/security_center/static/8433.php Vendor Advisory
- http://www.securityfocus.com/bid/4268 Patch, Vendor Advisory
- http://archives.neohapsis.com/archives/bugtraq/2002-03/0103.html archives.neohapsis.com
- http://www.isis.de/members/~s.frings/smstools/history.html www.isis.de
- http://www.iss.net/security_center/static/8433.php Vendor Advisory
- http://www.securityfocus.com/bid/4268 Patch, Vendor Advisory