CVE-2002-0436: Critical severity Sun SunOS vulnerability
sscdsuncourier.pl CGI script in the Sun Sunsolve CD pack allows remote attackers to execute arbitrary commands via shell metacharacters in the email address parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0436?
CVE-2002-0436 has a high severity rating due to its ability to allow remote attackers to execute arbitrary commands.
How do I fix CVE-2002-0436?
To fix CVE-2002-0436, you should update your affected SunOS or Solaris systems to a version that does not include the vulnerable CGI script.
What systems are affected by CVE-2002-0436?
CVE-2002-0436 affects SunOS versions 5.7, 5.8, and Solaris versions 7.0 and 8.0 running on x86 and SPARC architectures.
What type of vulnerability is CVE-2002-0436?
CVE-2002-0436 is a command injection vulnerability that arises from inadequate input validation in a CGI script.
Can CVE-2002-0436 lead to data breaches?
Yes, CVE-2002-0436 can lead to data breaches as it allows attackers to execute arbitrary commands with potentially sensitive data exposure.