CVE-2001-1242

The CVE-2001-1242 entry concerns a directory traversal in Un-CGI 1.9 and earlier, where an attacker can trigger arbitrary code execution by supplying a .. (dot dot) in an HTML form. The vulnerability arises in the way path components are processed, enabling remote exploitation. Affected software:...

CVE-2001-1241

Un-CGI 1.9 and earlier fail to verify that a CGI script has execution bits set before executing it, allowing remote attackers to run arbitrary commands by pointing Un-CGI at a document that starts with "#!" and the target program name.

CVE-1999-1502

CVE-1999-1502 affects the Quake 1.9 client. It is due to buffer overflows triggered by long values in four fields (precache paths, server name, server address, argument to the map console command), allowing a remote attacker to execute arbitrary commands on the client. Exploitation details are no...