CVE-2002-0299

HIGH 7.6CVE-2002-0299 · Published 31/05/2002 · updated 16/06/2026

In short

CVE-2002-0299 is a HIGH (CVSS 7.6) vulnerability affecting catchup (cnet).
Chance of exploitation in the next 30 days (EPSS): 2.2%, higher than 83.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
catchup cnet	`≤ 1.3`	No fix yet

Description

CNet CatchUp before 1.3.1 allows attackers to execute arbitrary code via a .RVP file that creates a file with an arbitrary extension (such as .BAT), which is executed during a scan.

References

marc.info
iss.net/security_center/static/8035.php
securityfocus.com/bid/3975

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free