Vulnerability Details CVE-2002-0094
config_converters.py in BSCW (Basic Support for Cooperative Work) 3.x and versions before 4.06 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name during filename conversion.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.012
EPSS Ranking 78.0%
CVSS Severity
CVSS v2 Score 7.5
References
- http://bscw.gmd.de/WhatsNew.html
- http://www.iss.net/security_center/static/7774.php
- http://www.securityfocus.com/archive/1/248000
- http://www.securityfocus.com/bid/3776
- http://bscw.gmd.de/WhatsNew.html
- http://www.iss.net/security_center/static/7774.php
- http://www.securityfocus.com/archive/1/248000
- http://www.securityfocus.com/bid/3776
Products affected by CVE-2002-0094
-
cpe:2.3:a:fraunhofer_fit:bscw:3.4
-
cpe:2.3:a:fraunhofer_fit:bscw:4.0