CVE-2002-0267

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2002-05-29 · updated 2026-06-16

Description

preferences.php in Simple Internet Publishing System (SIPS) before 0.3.1 allows remote attackers to gain administrative privileges via a linebreak in the "theme" field followed by the Status::admin command, which causes the Status line to be entered into the password file.

Affected products

Sips: 0.2.4, 0.3.0, 0.3.0pl1, 0.3.0pl2

References

http://marc.info/?l=bugtraq&m=101363233905645&w=2
http://sips.sourceforge.net/adminvul.html
http://www.iss.net/security_center/static/8193.php
http://www.securityfocus.com/bid/4097
http://marc.info/?l=bugtraq&m=101363233905645&w=2
http://sips.sourceforge.net/adminvul.html
http://www.iss.net/security_center/static/8193.php
http://www.securityfocus.com/bid/4097

Get alerted when CVE-2002-0267 or the next vulnerability affects your stack