Vulnerability in Hans Persson Molly

CVE-2002-1536

Molly IRC bot 0.5 allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the $host variable for nslookup.pl, (2) the $to, $from, or $message variables in pop.pl, (3) the $words or $text variables in sms.pl, or (4) the $server or $printer variables in hpled.pl.

EPSS: 0.033 (87.2th percentile) — read the EPSS interpretation.

Affected products

Hans_persson Molly — versions 0.5
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ, Patch)
cve@mitre.org (mailing-list, x_refsource_VULNWATCH)
cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)