Unscored CVE-2002-0622 EUVD-2002-0617GHSA-m6j2-mmwr-qqr9

The Office Web Components (OWC) package installer for Microsoft Commerce Server 2000 allows remote attackers to execute commands by passing…

Published Apr 2, 2003 · Updated Aug 8, 2024 · Assigned by mitre

Description

The Office Web Components (OWC) package installer for Microsoft Commerce Server 2000 allows remote attackers to execute commands by passing the commands as input to the OWC package installer, aka "OWC Package Command Execution".

References

MS02-033 vendor-advisory
5111 vdb-entry
5170 vdb-entry
mscs-owc-installer-permissions(9425) vdb-entry