1301 matches found
CVE-2001-0800
CVE-2001-0800 affects the IRIX lpsched service; IRIX 6.5.13f and earlier allow remote command execution via shell metacharacters. Public disclosures include a Metasploit module (tagprinter_exec) and exploit references, with SGI patch advisories available in the linked references. Affected compone...
CVE-1999-1128
The CVE-1999-1128 entry describes Internet Explorer 3.01 on Windows 95 as vulnerable. A .isp file is automatically downloaded and executed from remote malicious sites without user prompts, allowing remote arbitrary command execution. The available documents do not specify a remediation or patch, ...
CVE-1999-1153
HAMcards Postcard CGI script 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient email address...
CVE-1999-1479
The textcounter.pl by Matt Wright allows remote attackers to execute arbitrary commands via shell metacharacters...
CVE-1999-1549
Lynx 2.x is affected by CVE-1999-1549 due to not distinguishing internal vs external HTML. This can permit a local attacker to read a hidden, secure form value from a temporary file and craft a LYNXOPTIONS URL that causes Lynx to modify the user’s configuration file and execute commands. The PT S...
CVE-2001-0331
Buffer overflow in Embedded Support Partner ESP daemon rpc.espd in IRIX 6.5.8 and earlier allows remote attackers to execute arbitrary commands...
CVE-2001-0461
template.cgi in Free On-Line Dictionary of Computing FOLDOC allows remote attackers to read files and execute commands via shell metacharacters in the argument to template.cgi...
CVE-2001-0233
Buffer overflow in micq client 0.4.6 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long Description field...
CVE-2001-0100
bslist.cgi mailing list script allows remote attackers to execute arbitrary commands via shell metacharacters in the email address...
CVE-2001-0271
mailnews.cgi 1.3 and earlier allows remote attackers to execute arbitrary commands via a user name that contains shell metacharacters...
CVE-2001-0236
Buffer overflow in Solaris snmpXdmid SNMP to DMI mapper daemon allows remote attackers to execute arbitrary commands via a long "indication" event...
CVE-2001-0144
CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH server or client via an integer overflow...
CVE-2001-0115
Buffer overflow in arp command in Solaris 7 and earlier allows local users to execute arbitrary commands via a long -f parameter...
CVE-2001-0023
everythingform.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the config parameter...
CVE-2000-0912
MultiHTML CGI script allows remote attackers to read arbitrary files and possibly execute arbitrary commands by specifying the file name to the "multi" parameter...
CVE-2000-1131
Bill Kendrick web site guestbook GBook allows remote attackers to execute arbitrary commands via shell metacharacters in the MAILTO form variable...
CVE-2000-0969
CVE-2000-0969 affects the Half-Life dedicated server (build 3104 and earlier). The issue is a format-string vulnerability in the changelevel command that can allow remote code execution via the system console or rcon. The vulnerability arises from unsafely handling format strings in the server, e...
CVE-2000-0923
authenticate.cgi CGI program in Aplio PRO allows remote attackers to execute arbitrary commands via shell metacharacters in the password parameter...