CVE-2003-0084

Published: May 12, 2003Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

mod_auth_any package in Red Hat Enterprise Linux 2.1 and other operating systems does not properly escape arguments when calling other programs, which allows attackers to execute arbitrary commands via shell metacharacters.

Affected (1)

Products: Mod Auth Any: Mod Auth Any

Mod Auth Any

1 product

Mod Auth Any

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mod Auth Any Mod Auth Any	Version 1.2.2

References (12)

http://rhn.redhat.com/errata/RHSA-2003-114.html

Source: cve@mitre.org

PatchVendor Advisory

http://www.ciac.org/ciac/bulletins/n-090.shtml

Source: cve@mitre.org

http://www.itlab.musc.edu/webNIS/mod_auth_any.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2003-113.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/7448

Source: cve@mitre.org

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/11893

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2003-114.html