Unscored severity · published Jul 3, 2002
CVE-2002-0622
The Office Web Components (OWC) package installer for Microsoft Commerce Server 2000 allows remote attackers to execute commands by passing the commands as input to the OWC…
–
CVSS
19.4%
EPSS
No
On KEV
Description
The Office Web Components (OWC) package installer for Microsoft Commerce Server 2000 allows remote attackers to execute commands by passing the commands as input to the OWC package installer, aka "OWC Package Command Execution".
Exploitation
Is it being used?
Exploit prediction (EPSS)19.4% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CS
Commerce Server · Microsoft
2000; 2000; 2000 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-0622
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-0622
www.iss.net
http://www.iss.net/security_center/static/9425.php
www.osvdb.org
http://www.osvdb.org/5170
www.securityfocus.com
http://www.securityfocus.com/bid/5111
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-033
More from Commerce Server
8.8
CVE-2012-1856
Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability
8.8
CVE-2012-0158
Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability
–
CVE-2007-1201
Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute arbitrary code via vectors related to…
–
CVE-2006-1257
The sample files in the authfiles directory in Microsoft Commerce Server 2002 before SP2 allow remote attackers to bypass authentication by logging in to authfiles/login.asp with…
–
CVE-2002-0620
Buffer overflow in the Profile Service of Microsoft Commerce Server 2000 allows remote attackers to cause the server to fail or run arbitrary code in the LocalSystem security…