nvd-json-data-feeds/CVE-2002/CVE-2002-15xx/CVE-2002-1582.json

{
  "id": "CVE-2002-1582",
  "sourceIdentifier": "cve@mitre.org",
  "published": "2004-12-06T05:00:00.000",
  "lastModified": "2008-09-05T20:30:59.217",
  "vulnStatus": "Analyzed",
  "descriptions": [
    {
      "lang": "en",
      "value": "compose.cgi in Mailreader.com 2.3.30 and 2.3.31, when using Sendmail as the Mail Transfer Agent, allows remote attackers to execute arbitrary commands via shell metacharacters in the RealEmail configuration variable, which is used to call Sendmail in network.cgi."
    },
    {
      "lang": "es",
      "value": "compose.cgi en Mailreader.com 2.3.30 y 2.3.31, cuando se usa Sendmail como Agente de Transferencia de Correo (MTA), permite a atacantes remotos ejecutar c\u00f3digo arbitrario mediante metacaract\u00e9res de shell en la variable de configuraci\u00f3n RealMail"
    }
  ],
  "metrics": {
    "cvssMetricV2": [
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "2.0",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "accessVector": "NETWORK",
          "accessComplexity": "LOW",
          "authentication": "NONE",
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 10.0
        },
        "baseSeverity": "HIGH",
        "exploitabilityScore": 10.0,
        "impactScore": 10.0,
        "acInsufInfo": false,
        "obtainAllPrivilege": true,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "weaknesses": [
    {
      "source": "nvd@nist.gov",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:mailreader.com:mailreader.com:2.3.30:*:*:*:*:*:*:*",
              "matchCriteriaId": "0A37F7F2-C147-4D04-83D0-421EDB1EF343"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:mailreader.com:mailreader.com:2.3.31:*:*:*:*:*:*:*",
              "matchCriteriaId": "19CC1D27-027D-4032-B9CC-CD41ED085FD0"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "http://www.iss.net/security_center/static/10491.php",
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ]
    },
    {
      "url": "http://www.mailreader.com/download/ChangeLog",
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ]
    },
    {
      "url": "http://www.securityfocus.com/archive/1/297428",
      "source": "cve@mitre.org",
      "tags": [
        "Exploit",
        "Patch",
        "Vendor Advisory"
      ]
    },
    {
      "url": "http://www.securityfocus.com/bid/6058",
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ]
    }
  ]
}