CVE-2002-1361

overflow.cgi CGI script in Sun Cobalt RaQ 4 with the SHP (Security Hardening Patch) installed allows remote attackers to execute arbitrary code via a POST request with shell metacharacters in the email parameter.

CVSS v2.0 NVD

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

11.87% chance of exploitation in the next 30 days, 96th percentile

Published

2004-09-01

Updated

2024-08-08

Proof-of-concept exploits (1)

• http://marc.info/?l=bugtraq&m=103912513522807&w=2

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/22072

Security advisories

• http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/49377
• http://www.cert.org/advisories/CA-2002-35.html
• http://www.kb.cert.org/vuls/id/810921
• http://www.securityfocus.com/bid/6326

References

• CVE Record
• NVD entry