5626 matches found
CVE-2001-0370
fcheck prior to 2.57.59 calls the file signature checking program insecurely, which can allow a local user to run arbitrary commands via a file name that contains shell metacharacters...
CVE-2001-0400
CVE-2001-0400 affects the script nph-maillist.pl , where remote attackers can execute arbitrary commands by injecting shell metacharacters ("`") into the email address. Public records in the connected OpenVAS entries refer to nph-publish.cgi with a known flaw that allows command execution with th...
CVE-2001-0370: Undefined Security Weakness
fcheck prior to 2.57.59 calls the file signature checking program insecurely, which can allow a local user to run arbitrary commands via a file name that contains shell metacharacters...
CVE-2001-0329: Undefined Security Weakness
Bugzilla 2.10 allows remote attackers to execute arbitrary commands via shell metacharacters in a username that is then processed by 1 the Bugzillalogin cookie in postbug.cgi, or 2 the who parameter in processbug.cgi...
CVE-2001-0400: Undefined Security Weakness
nph-maillist.pl allows remote attackers to execute arbitrary commands via shell metacharacters "" in the email address...
CVE-2001-0274
kicq IRC client 1.0.0, and possibly later versions, allows remote attackers to execute arbitrary commands via shell metacharacters in a URL...
CVE-2001-0100
bslist.cgi mailing list script allows remote attackers to execute arbitrary commands via shell metacharacters in the email address...
CVE-2001-0021
MailMan Webmail 3.0.25 and earlier is affected by an arbitrary command execution vulnerability in mmstdod.cgi. Input to the ALTERNATE_TEMPLATES/alternate_template parameters is not properly sanitized, allowing a remote attacker to execute arbitrary commands. The issue is documented in CVE-2001-00...
CVE-2001-0099: Undefined Security Weakness
bsguest.cgi guestbook script allows remote attackers to execute arbitrary commands via shell metacharacters in the email address...
CVE-2000-0816: Undefined Security Weakness
Linux tmpwatch --fuser option allows local users to execute arbitrary commands by creating files whose names contain shell metacharacters...
CVE-2001-0100: Undefined Security Weakness
bslist.cgi mailing list script allows remote attackers to execute arbitrary commands via shell metacharacters in the email address...
CVE-2001-0021: Undefined Security Weakness
MailMan Webmail 3.0.25 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the alternatetemplate parameter...
CVE-2001-0274: Undefined Security Weakness
kicq IRC client 1.0.0, and possibly later versions, allows remote attackers to execute arbitrary commands via shell metacharacters in a URL...
CVE-2001-0274
kicq IRC client 1.0.0, and possibly later versions, allows remote attackers to execute arbitrary commands via shell metacharacters in a URL...
CVE-2001-0271
mailnews.cgi 1.3 and earlier allows remote attackers to execute arbitrary commands via a user name that contains shell metacharacters...
Дырка в bugzilla (shell metacharacters)
Недостаточная проверка ввода пользователя приводит к возможности выполнения команд на сервере...
OpenBSD 2.x < 2.8 FTPd - 'glob()' Remote Buffer Overflow
// source: https://www.securityfocus.com/bid/2548/info The BSD ftp daemon and derivatives such as IRIX ftpd or the ftp daemon shipped with Kerberos 5 contain a number of buffer overflows that may lead to a compromise of root access to malicious users. During parsing operations, the ftp daemon...
FreeBSD 2.2-4.2 / NetBSD 1.2-4.5 / OpenBSD 2.x - FTPd 'glob()' Remote Buffer Overflow
// source: https://www.securityfocus.com/bid/2548/info The BSD ftp daemon and derivatives such as IRIX ftpd or the ftp daemon shipped with Kerberos 5 contain a number of buffer overflows that may lead to a compromise of root access to malicious users. During parsing operations, the ftp daemon...
CVE-2001-0271
CVE-2001-0271 affects mailnews.cgi (version 1.3 and earlier). The vulnerability allows remote attackers to execute arbitrary commands by supplying a user name that contains shell metacharacters. This is a remote command-execution flaw with high impact (complete confidentiality, integrity, and ava...