4484 matches found
CVE-2000-0059
CVE-2000-0059 affects PHP3 when safe_mode is enabled. The vulnerability arises because shell metacharacters are not properly filtered from commands executed via popen , potentially allowing remote attackers to execute arbitrary commands. The provided documents describe the issue but do not specif...
CVE-1999-0984
Matt's Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry...
CVE-1999-0941
CVE-1999-0941 affects the Mutt mail client. The vulnerability allows a remote attacker to execute commands via shell metacharacters. The provided documents identify the impact as remote command execution with a CVSS v2 base score of 7.5 (High) and network attack vector with low complexity, but do...
CVE-1999-0978
CVE-1999-0978 concerns ht://Dig htsearch CGI in the htdig package. Connected Nessus entry describes an information-disclosure vulnerability where the htsearch CGI allows reading arbitrary files on the target host. The affected component is the htsearch CGI (part of ht/dig), prior to version 3.1.5...
CVE-1999-0938
CVE-1999-0938 involves the MBone SDR Package, which is vulnerable to remote command execution via shell metacharacters in SIP messages. The concrete details indicate the affected software (MBone SDR Package) and the vulnerable component (SIP message handling that allows shell metacharacter input)...
CVE-1999-0936
CVE-1999-0936 affects BNBSurvey’s Survey.cgi (Big Nose Bird) remote CGI script. The vulnerability arises from insufficient input validation, allowing shell metacharacters to be injected in user input, enabling remote command execution with the web server’s privileges. Severity is high (CVSSv2 bas...
CVE-1999-0934
classifieds.cgi allows remote attackers to read arbitrary files via shell metacharacters...
CVE-1999-0934
CVE-1999-0934 affects the classifieds.cgi CGI script. The vulnerability arises from insufficient input filtering, allowing remote attackers to read arbitrary files on the Web server by injecting shell metacharacters, effectively executing commands via the httpd process. Impact note: read-access t...
CVE-1999-0947
AN-HTTPd server is affected by a remote command execution risk due to default CGI scripts test.bat, input.bat, input2.bat, and ssi/envout.bat that allow shell metacharacters. Exploitation would enable an attacker to run arbitrary commands on the remote host. The vulnerability details are drawn fr...
CVE-1999-0868
ucbmail allows remote attackers to execute commands via shell metacharacters that are passed to it from INN...
CVE-2000-0059
PHP3 with safemode enabled does not properly filter shell metacharacters from commands that are executed by popen, which could allow remote attackers to execute commands...
CVE-1999-1512
The AMaViS virus scanner 0.2.0-pre4 and earlier allows remote attackers to execute arbitrary commands as root via an infected mail message with shell metacharacters in the reply-to field...
CVE-1999-1333
automatic download option in ncftp 2.4.2 FTP client in Red Hat Linux 5.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the names of files that are to be downloaded...
CVE-2000-0013
IRIX soundplayer program allows local users to gain privileges by including shell metacharacters in a .wav file, which is executed via the midikeys program...
CVE-2000-0010
WebWho+ whois.cgi program allows remote attackers to execute commands via shell metacharacters in the TLD parameter...
PT-1999-1848 · Glftpd · Glftpd
Name of the Vulnerable Software and Affected Versions: glFtpD affected versions not specified Description: The issue allows local users to gain privileges through the use of metacharacters in the SITE ZIPCHK command. Recommendations: At the moment, there is no information about a newer version th...
CVE-1999-0934
classifieds.cgi allows remote attackers to read arbitrary files via shell metacharacters...
CVE-1999-0978
htdig allows remote attackers to execute commands via filenames with shell metacharacters...