Back to Database
Status published
High
CVE-2002-0218
Format string vulnerability in (1) sastcpd in SAS/Base 8.0 and...
Vulnerability Description
Format string vulnerability in (1) sastcpd in SAS/Base 8.0 and 8.1 or (2) objspawn in SAS/Integration Technologies 8.0 and 8.1 allows local users to execute arbitrary code via format specifiers in a command line argument.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2002-0218
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.securityfocus.com/bid/3980
- http://www.sas.com/service/techsup/unotes/SN/004/004201.html
- http://online.securityfocus.com/archive/1/252847
- http://www.iss.net/security_center/static/8018.php
- http://online.securityfocus.com/archive/1/252891
- http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0032.html
More from sas
View All →CVE-2022-25256
SAS Web Report Studio 4.4 allows XSS. /SASWebReportStudio/logonAndRender.do has two...
Medium
6.1
CVE-2021-41569
SAS/Intrnet 9.4 build 1520 and earlier allows Local File Inclusion....
High
7.5
CVE-2021-35475
SAS Environment Manager 2.5 allows XSS through the Name field...
Medium
5.4
CVE-2020-9350
Graph Builder in SAS Visual Analytics 8.5 allows XSS via...
Medium
5.4
CVE-2019-14678
SAS XML Mapper 9.45 has an XML External Entity (XXE)...
Critical
10
Affected Vendor
Affected Software
sas base, sas integration technologies
Vulnerable Versions:
8.0, 8.1
Timeline
Official Publish:
May 3rd, 2002
Last Modified:
August 8th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.