critical10.0Public exploit code
CVE-2002-0436
sscd_suncourier.pl CGI script in the Sun Sunsolve CD pack allows remote attackers to execute arbitrary commands via shell metacharacters in the email address p…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Solaris 7.0/8 Sunsolve CD - SSCD_SunCourier.pl CGI Script Arbitrary Command Execution2002-03-11 · remote · cgi · Verified
Impact
sscd_suncourier.pl CGI script in the Sun Sunsolve CD pack allows remote attackers to execute arbitrary commands via shell metacharacters in the email address parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sun | Solaris | Versions 7.0, 8.0 |
| Sun | Sunos | Versions 5.7, 5.8 |