CVE-2002-0489

critical

Description

Linux Directory Penguin NsLookup CGI script (nslookup.pl) 1.0 allows remote attackers to execute arbitrary code via shell metacharacters in the (1) query or (2) type parameters.

References

http://www.securityfocus.com/bid/4353

http://www.iss.net/security_center/static/8601.php

http://marc.info/?l=bugtraq&m=101684215209558&w=2

Details

Source: Mitre, NVD

Published: 2002-08-12

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H