Unscored severity · published Aug 12, 2002
CVE-2002-0488
Linux Directory Penguin traceroute.pl CGI script 1.0 allows remote attackers to execute arbitrary code via shell metacharacters in the host parameter
–
CVSS
6%
EPSS
No
On KEV
Description
Linux Directory Penguin traceroute.pl CGI script 1.0 allows remote attackers to execute arbitrary code via shell metacharacters in the host parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.0% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LD
Linux Directory Penguin Traceroute · Linux Directory Penguin
1.0 · source: NVD
Affected product
LD
Linux Directory Penguin Traceroute
Linux Directory Penguin
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-0488
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-0488
Patch
http://www.iss.net/security_center/static/8600.php
URL Repurposed
http://www.linux-directory.com/scripts/traceroute.pl
Vendor Advisory
http://www.securityfocus.com/archive/1/263285
Patch
http://www.securityfocus.com/bid/4332