CVE-2001-0930

Technical details about CVE-2001-0930 are not publicly provided in the connected documents. Monitor for updates to confirm affected products, impact and remediation when additional details become available.

CVE-2001-0956

CVE-2001-0956 affects speechd 0.54 and earlier when used with the Festival or rsynth speech synthesis packages. The root issue is that shell metacharacters can be exploited to execute arbitrary commands, leading to full compromise of the affected system. The vulnerability is local-privilege relat...

CVE-2001-0937

CVE-2001-0937 concerns PGPMail.pl CGI (up to version 1.31) where the recipient and pgpuserid CGI variables are not properly filtered before being passed to shell commands. This allows remote attackers to execute arbitrary commands on the server with the web server’s privileges. OpenVAS and Nessus...

CVE-2001-0956

speechd 0.54 and earlier, with the Festival or rsynth speech synthesis package, allows attackers to execute arbitrary commands via shell metacharacters...

CVE-2001-1014

CVE-2001-1014 concerns the E-Shop (WebDiscount) CGI used by eshop.pl. The OpenVAS NASL entry documents a vulnerability in the WebDiscount CGI that allows remote attackers to execute arbitrary commands with the web server’s privileges by supplying shell metacharacters in the seite parameter. This ...

CVE-2001-0930

Sendpage.pl allows remote attackers to execute arbitrary commands via a message containing shell metacharacters...

CVE-2001-0997: Undefined Security Weakness

Textor Webmasters Ltd listrec.pl CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the TEMPLATE parameter...

CVE-2001-0937: Undefined Security Weakness

PGPMail.pl 1.31 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 recipient or 2 pgpuserid parameters...

CVE-2001-0956: Undefined Security Weakness

speechd 0.54 and earlier, with the Festival or rsynth speech synthesis package, allows attackers to execute arbitrary commands via shell metacharacters...

CVE-2001-0985: Undefined Security Weakness

shop.pl in Hassan Consulting Shopping Cart 1.23 allows remote attackers to execute arbitrary commands via shell metacharacters in the "page" parameter...

CVE-2001-1014: Undefined Security Weakness

eshop.pl in WebDiscounteshop allows remote attackers to execute arbitrary commands via shell metacharacters in the seite parameter...

CVE-2001-0992: Undefined Security Weakness

shopplus.cgi in ShopPlus shopping cart allows remote attackers to execute arbitrary commands via shell metacharacters in the "file" parameter...

CVE-2001-0930: Undefined Security Weakness

Sendpage.pl allows remote attackers to execute arbitrary commands via a message containing shell metacharacters...

CVE-2001-1214

manual.php in Marcus S. Xenakis Unix Manual 1.0 allows remote attackers to execute arbitrary code via a URL that contains shell metacharacters...

CVE-2001-1187

csvform.pl 0.1 allows remote attackers to execute arbitrary commands via metacharacters in the file parameter...

CVE-2001-0844

Vulnerability in 1 Book of guests and 2 Post it! allows remote attackers to execute arbitrary code via shell metacharacters in the email parameter...

CVE-2001-0937

PGPMail.pl 1.31 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 recipient or 2 pgpuserid parameters...

CVE-2001-0930

Sendpage.pl allows remote attackers to execute arbitrary commands via a message containing shell metacharacters...

CVE-2001-0800

CVE-2001-0800 affects the IRIX lpsched service; IRIX 6.5.13f and earlier allow remote command execution via shell metacharacters. Public disclosures include a Metasploit module (tagprinter_exec) and exploit references, with SGI patch advisories available in the linked references. Affected compone...

CVE-2001-0844: Undefined Security Weakness

Vulnerability in 1 Book of guests and 2 Post it! allows remote attackers to execute arbitrary code via shell metacharacters in the email parameter...