CVE-2002-0622
Published Jul 3, 2002
Last updated 6 years ago
Overview
- Description
- The Office Web Components (OWC) package installer for Microsoft Commerce Server 2000 allows remote attackers to execute commands by passing the commands as input to the OWC package installer, aka "OWC Package Command Execution".
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.5
- Impact score
- 6.4
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:commerce_server:2000:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AF65806C-05BF-4EB7-976B-3346F2D64886"
},
{
"criteria": "cpe:2.3:a:microsoft:commerce_server:2000:sp1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C73B40C1-B8D7-46FB-B327-8C93F2ACDD9D"
},
{
"criteria": "cpe:2.3:a:microsoft:commerce_server:2000:sp2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DD28CDF4-00E9-4F61-8201-76FB44544A33"
}
],
"operator": "OR"
}
]
}
]