CVE-2002-0061: OS Command Injection
Apache for Win32 before 1.3.24, and 2.0.x before 2.0.34-beta, allows remote attackers to execute arbitrary commands via shell metacharacters (a | pipe character) provided as arguments to batch (.bat) or .cmd scripts, which are sent unfiltered to the shell interpreter, typically cmd.exe.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0061?
CVE-2002-0061 is considered a critical vulnerability as it allows remote attackers to execute arbitrary commands on affected systems.
How do I fix CVE-2002-0061?
To fix CVE-2002-0061, upgrade to Apache HTTP Server version 1.3.24 or 2.0.34-beta or later.
Which versions of Apache HTTP Server are affected by CVE-2002-0061?
Apache HTTP Server versions 1.3.23, all versions up to 1.3.24, and versions 2.0.0 through 2.0.28-beta are affected by CVE-2002-0061.
What impact does CVE-2002-0061 have on my system?
CVE-2002-0061 allows attackers to execute arbitrary commands, potentially leading to complete system compromise.
Is CVE-2002-0061 a vulnerability related to Windows servers?
Yes, CVE-2002-0061 specifically affects the Win32 version of Apache HTTP Server.