4485 matches found
CVE-2000-0296
fcheck allows local users to gain privileges by embedding shell metacharacters into file names that are processed by fcheck...
CVE-2000-0242
WindMail allows remote attackers to read arbitrary files or execute commands via shell metacharacters...
CVE-2000-0188
EZShopper 3.0’s search.cgi is vulnerable to directory traversal and command injection. Remote attackers can read arbitrary files via a .. path and may execute shell commands through metacharacters. The Nessus entry also mentions directory traversal in loadpage.cgi and possible arbitrary command e...
CVE-2000-0040
The CVE-2000-0040 issue affects glFtpD, where local users can gain privileges by supplying metacharacters in the SITE ZIPCHK command. Documentation in PT-1999-1848 notes that affected versions are not specified and provides no information about a fix. Overall, the vulnerability arises from improp...
CVE-2000-0213
The Sambar server includes batch files ECHO.BAT and HELLO.BAT in the CGI directory, which allow remote attackers to execute commands via shell metacharacters...
CVE-2000-0177
CVE-2000-0177 concerns DNSTools CGI applications where remote attackers can execute arbitrary commands due to shell metacharacters. The issue is described across NVD and CVE records as enabling complete compromise (C, I, A) with network access and no authentication, yielding a very high risk (CVS...
CVE-2000-0213
The Sambar server is affected by CVE-2000-0213 due to batch files in the CGI directory (hello.bat and echo.bat) that allow remote attackers to execute commands via shell metacharacters. The Nessus plugin confirms these scripts enable arbitrary code execution with the web server’s privileges, iden...
CVE-2000-0177
DNSTools CGI applications allow remote attackers to execute arbitrary commands via shell metacharacters...
CVE-2000-0207
SGI InfoSearch CGI program infosrch.cgi allows remote attackers to execute commands via shell metacharacters...
CVE-2000-0213
The Sambar server includes batch files ECHO.BAT and HELLO.BAT in the CGI directory, which allow remote attackers to execute commands via shell metacharacters...
CVE-2000-0141
Infopop Ultimate Bulletin Board UBB allows remote attackers to execute commands via shell metacharacters in the topic hidden field...
PT-2000-1126 · Infopop · Infopop Ultimate Bulletin Board
Name of the Vulnerable Software and Affected Versions: Infopop Ultimate Bulletin Board UBB affected versions not specified Description: The issue allows remote attackers to execute commands by injecting shell metacharacters into the topic hidden field. Recommendations: At the moment, there is no...
CVE-2000-0035
resend command in Majordomo allows local users to gain privileges via shell metacharacters...
CVE-1999-0983
The CVE-1999-0983 entry concerns the Whois Internic Lookup program’s whois.cgi, where the domain field accepts input that can be manipulated with shell metacharacters to execute commands remotely. Public sources in the connected documents confirm the vulnerability involves remote command executio...
CVE-2000-0035
CVE-2000-0035 : The vulnerability involves Majordomo’s resend command that allows local users to gain privileges via shell metacharacters. This is a local-privilege issue with the root cause being unsafely handled shell metacharacters in the resend logic. The NVD entry lists a CVSSv2 base score o...
CVE-1999-0984
Matt's Whois program whois.cgi is vulnerable to remote command execution via shell metacharacters in the domain field. The root cause is unsanitized input in the domain entry. Affected: Matt's Whois program whois.cgi (versions not specified). Impact: arbitrary commands executed on the server. Exp...
CVE-1999-0985
CC Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry...
CVE-1999-0941
Mutt mail client allows a remote attacker to execute commands via shell metacharacters...
CVE-2000-0059
CVE-2000-0059 affects PHP3 when safe_mode is enabled. The vulnerability arises because shell metacharacters are not properly filtered from commands executed via popen , potentially allowing remote attackers to execute arbitrary commands. The provided documents describe the issue but do not specif...