Unscored CVE-2002-0299 EUVD-2002-0296GHSA-6jg6-9vx2-hv9x

CNet CatchUp before 1.3.1 allows attackers to execute arbitrary code via a .RVP file that creates a file with an arbitrary extension (such …

Published Apr 2, 2003 · Updated Aug 8, 2024 · Assigned by mitre

Description

CNet CatchUp before 1.3.1 allows attackers to execute arbitrary code via a .RVP file that creates a file with an arbitrary extension (such as .BAT), which is executed during a scan.

References

3975 vdb-entry
cnet-catchup-gain-privileges(8035) vdb-entry
20020220 CNet CatchUp arbitrary code execution mailing-list