Vulnerability Details CVE-2002-0904
SayText function in Kismet 2.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters (backtick or pipe) in the essid argument.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.012
EPSS Ranking 78.4%
CVSS Severity
CVSS v2 Score 7.5
References
- http://archives.neohapsis.com/archives/bugtraq/2002-05/0259.html
- http://marc.info/?l=vuln-dev&m=102269718506080&w=2
- http://www.iss.net/security_center/static/9213.php
- http://www.kismetwireless.net/CHANGELOG
- http://www.securityfocus.com/bid/4883
- http://archives.neohapsis.com/archives/bugtraq/2002-05/0259.html
- http://marc.info/?l=vuln-dev&m=102269718506080&w=2
- http://www.iss.net/security_center/static/9213.php
- http://www.kismetwireless.net/CHANGELOG
- http://www.securityfocus.com/bid/4883