RCE in Apple Mac Os X

CVE-2002-1898

Terminal 1.3 in Apple Mac OS X 10.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a telnet:// link, which is executed by Terminal.app window.

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.032 (86.7th percentile) — read the EPSS interpretation.

Affected products

Apple Mac_os_x — versions 10.2
Apple Terminal
N/a — versions n/a

Weakness classification (CWE)

CWE-78 — OS Command Injection

References

cve@mitre.org (vendor-advisory, x_refsource_APPLE, Patch, Mailing List, Vendor Advisory)
cve@mitre.org (Exploit, Patch, VDB Entry, Third Party Advisory, vdb-entry, Broken Link, x_refsource_BID)
cve@mitre.org (Patch, vdb-entry, Broken Link, x_refsource_XF)
cve@mitre.org (Third Party Advisory, x_refsource_MISC)