CVE-2002-0061
NoneCVSS
—
EPSS
50.4%
Published
Mar 21, 2002
CISA due date
—
The record
Apache for Win32 before 1.3.24, and 2.0.x before 2.0.34-beta, allows remote attackers to execute arbitrary commands via shell metacharacters (a | pipe character) provided as arguments to batch (.bat) or .cmd scripts, which are sent unfiltered to the shell interpreter, typically cmd.exe.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-79992 A flaw was found in Emacs TRAMP. CWE-78
- CVE-2026-61898 The Ubuntu-specific language helper scripts (save-to-pam-env, update-langlist) shipped… CWE-78
- CVE-2026-73623 GitPython before 3.1.54 contains an incomplete denylist in unsafe_git_clone_options that… CWE-78
- CVE-2026-73625 GitPython versions before 3.1.54 contain a remote code execution vulnerability in the… CWE-78
- CVE-2026-73077 Vim is an open source, command line text editor. CWE-78
- CVE-2026-15816 A flaw was found in dracut. CWE-78
- CVE-2026-67325 GitPython before 3.1.51 contains an incomplete command injection blocklist that fails to… CWE-78
- CVE-2026-56389 GNU Bison allows for an execution of an arbitrary program during HTML report generation… CWE-78