PT-2002-1151 · Microsoft+1 · Cmd.Exe+2

Published 2002-03-21 · Updated 2024-01-26 · CVE-2002-0061

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apache for Win32 versions 1.3.24 and earlier Apache for Win32 versions 2.0.x through 2.0.34-beta

Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters, such as a | pipe character, provided as arguments to batch (.bat) or .cmd scripts. These scripts are sent unfiltered to the shell interpreter, typically cmd.exe.

Recommendations For Apache for Win32 versions 1.3.24 and earlier, update to version 1.3.24 or later to resolve the issue. For Apache for Win32 versions 2.0.x through 2.0.34-beta, update to version 2.0.34-beta or later to resolve the issue. As a temporary workaround, consider restricting access to batch file CGI scripts until a patch is available.

Exploit

Fix

RCE

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2002-0061

Affected Products

Apache Http Server

Apache For Win32

Cmd.Exe

References · 14

• 🔥 https://exploit-db.com/exploits/21350 · Exploit
• https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E · Vendor Advisory
• https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0061 · Security Note
• https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E · Vendor Advisory
• https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0061 · Note
• http://marc.info/?l=bugtraq&m=101674082427358&w=2 · Note
• https://httpd.apache.org/security/vulnerabilities_13.html#CVE-2002-0061 · Note
• http://apacheweek.com/issues/02-03-29#apache1324 · Note
• http://securityfocus.com/bid/4335 · Note
• https://t.me/cvenotify/68955 · Telegram Post
• http://online.securityfocus.com/archive/1/263927 · Note
• http://iss.net/security_center/static/8589.php · Note