CVE-2002-0437

critical

Description

Smsd in SMS Server Tools (SMStools) before 1.4.8 allows remote attackers to execute arbitrary commands via shell metacharacters (backquotes) in message text, as described with the term "string format vulnerability" by some sources.

References

http://www.securityfocus.com/bid/4268

http://www.iss.net/security_center/static/8433.php

http://www.isis.de/members/~s.frings/smstools/history.html

http://archives.neohapsis.com/archives/bugtraq/2002-03/0103.html

Details

Source: Mitre, NVD

Published: 2002-07-26

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H