CVEvulnerability
CVE-2003-0084
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2003-05-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
mod_auth_any package in Red Hat Enterprise Linux 2.1 and other operating systems does not properly escape arguments when calling other programs, which allows attackers to execute arbitrary commands via shell metacharacters.
Affected configurations
• mod auth any mod auth any 1.2.2
References
- http://rhn.redhat.com/errata/RHSA-2003-114.html Patch, Vendor Advisory
- http://www.ciac.org/ciac/bulletins/n-090.shtml www.ciac.org
- http://www.itlab.musc.edu/webNIS/mod_auth_any.html www.itlab.musc.edu
- http://www.redhat.com/support/errata/RHSA-2003-113.html www.redhat.com
- http://www.securityfocus.com/bid/7448 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11893 exchange.xforce.ibmcloud.com
- http://rhn.redhat.com/errata/RHSA-2003-114.html Patch, Vendor Advisory
- http://www.ciac.org/ciac/bulletins/n-090.shtml www.ciac.org
- http://www.itlab.musc.edu/webNIS/mod_auth_any.html www.itlab.musc.edu
- http://www.redhat.com/support/errata/RHSA-2003-113.html www.redhat.com
- http://www.securityfocus.com/bid/7448 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11893 exchange.xforce.ibmcloud.com