Unscored CVE-2002-1536 EUVD-2002-1518GHSA-8cj5-j235-9429

Molly IRC bot 0.5 allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the $host variable for nslookup.pl,…

Published Mar 18, 2003 · Updated Aug 8, 2024 · Assigned by mitre

Description

Molly IRC bot 0.5 allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the $host variable for nslookup.pl, (2) the $to, $from, or $message variables in pop.pl, (3) the $words or $text variables in sms.pl, or (4) the $server or $printer variables in hpled.pl.

References

molly-host-execute-commands(10397) vdb-entry
20021018 SCAN Associates Advisory: Molly 0.5 - Remote Command Execution mailing-list
20021018 SCAN Associates Advisory: Molly 0.5 - Remote Command Execution mailing-list
6007 vdb-entry