CVE-2002-0437: Stefan Frings Sms Server Tools

High severity, CVSS 10.0. EPSS: 3.4% chance of exploitation in the next 30 days.

Smsd in SMS Server Tools (SMStools) before 1.4.8 allows remote attackers to execute arbitrary commands via shell metacharacters (backquotes) in message text, as described with the term "string format vulnerability" by some sources.

Affected products

• Stefan Frings Sms Server Tools: version 1.4.6 only; version 1.4.7 only

Published 2002-07-26. Last modified 2026-06-16.