Unscored CVE-2002-0437 EUVD-2002-0434GHSA-hqgc-cq8p-69cp

Smsd in SMS Server Tools (SMStools) before 1.4.8 allows remote attackers to execute arbitrary commands via shell metacharacters (backquotes…

Published Apr 2, 2003 · Updated Aug 8, 2024 · Assigned by mitre

Description

Smsd in SMS Server Tools (SMStools) before 1.4.8 allows remote attackers to execute arbitrary commands via shell metacharacters (backquotes) in message text, as described with the term "string format vulnerability" by some sources.

References

http://www.isis.de/members/~s.frings/smstools/history.html
4268 vdb-entry
sms-tools-format-string(8433) vdb-entry
20020311 SMStools vulnerabilities in release before 1.4.8 mailing-list