VULNERABILITY INTELLIGENCE

CVE-2002-1197

CVSS score7.5 HIGH

EPSS probability2.34%

CISA KEVNot currently listed

Published2002-10-28

Last modified2026-06-16

Description

bugzilla_email_append.pl in Bugzilla 2.14.x before 2.14.4, and 2.16.x before 2.16.1, allows remote attackers to execute arbitrary code via shell metacharacters in a system call to processmail.