Back
CVE-2002-0437
Smsd in SMS Server Tools (SMStools) before 1.4.8 allows remote attackers to execute arbitrary commands via shell metacharacters (backquotes) in message text, as described with the term "string format vulnerability" by some sources.
Published: Jul 26, 2002
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (2)
| Vendor | Product | Version |
|---|---|---|
| stefan_frings | sms_server_tools | 1.4.6 |
| stefan_frings | sms_server_tools | 1.4.7 |
GitHub Security Advisory GHSA-hqgc-cq8p-69cp
Smsd in SMS Server Tools (SMStools) before 1.4.8 allows remote attackers to execute arbitrary...
References (8)
- http://archives.neohapsis.com/archives/bugtraq/2002-03/0103.html
- http://www.isis.de/members/~s.frings/smstools/history.html
- http://www.iss.net/security_center/static/8433.php Vendor Advisory
- http://www.securityfocus.com/bid/4268 Patch, Vendor Advisory
- http://archives.neohapsis.com/archives/bugtraq/2002-03/0103.html
- http://www.isis.de/members/~s.frings/smstools/history.html
- http://www.iss.net/security_center/static/8433.php Vendor Advisory
- http://www.securityfocus.com/bid/4268 Patch, Vendor Advisory
Risk Scores
CVSS Score
10.0 / 10
EPSS Score
3.39%
Top 12% most likely to be exploited
Threat Score
41 / 100
Data Sources
NVD
EPSS
GitHub