CVE-2000-0141

Infopop Ultimate Bulletin Board UBB allows remote attackers to execute commands via shell metacharacters in the topic hidden field...

CVE-2000-0585

CVE-2000-0585 affects the ISC DHCP client program dhclient. The flaw allows remote attackers to execute arbitrary commands via shell metacharacters in DHCP responses. CVSS-2.0 base score is 10.0 (NETWORK, LOW ATTACK, NONE AUTH, C/I/A = COMPLETE). No remediation details are provided in the connect...

CVE-2000-0787

The CVE covers the IRC XChat client (versions ≤ 1.4.2). It describes a remote command execution where shell metacharacters embedded in a URL, used by XChat to launch a browser, can be exploited. The NVD notes a high impact (CVSS v2 base score 7.5) with network access and no authentication require...

CVE-2000-0466

Affected software: AIX cdmount (part of UMS) on AIX systems. The issue arises from insecure handling of user-supplied arguments in cdmount, which spawns a shell to invoke the mount command with those arguments, allowing local users to execute arbitrary commands as root (SUID root wrapper). Impact...

CVE-2000-0141

Infopop Ultimate Bulletin Board (UBB) is affected by CVE-2000-0141. The vulnerability allows remote attackers to execute commands by injecting shell metacharacters into the topic hidden field. Connected sources corroborate that this affects Infopop UBB, with the PT-2000-1126 entry noting that aff...

CVE-2000-0787

IRC Xchat client versions 1.4.2 and earlier allows remote attackers to execute arbitrary commands by encoding shell metacharacters into a URL which XChat uses to launch a web browser...

CVE-2000-0064

The CVE-2000-0064 issue affects Nortel Contivity HTTP Server, specifically the cgiproc CGI script. The underlying problem is a vulnerability in cgiproc where a malformed URL containing shell metacharacters can crash the remote host, causing a denial of service. Affected component: cgiproc CGI scr...

CVE-2000-0466: Undefined Security Weakness

AIX cdmount allows local users to gain root privileges via shell metacharacters...

CVE-2000-0670: Undefined Security Weakness

The cvsweb CGI script in CVSWeb 1.80 allows remote attackers with write access to a CVS repository to execute arbitrary commands via shell metacharacters...

CVE-2000-0322: Undefined Security Weakness

The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters...

CVE-2000-0064: Undefined Security Weakness

cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to cause a denial of service via a malformed URL that includes shell metacharacters...

CVE-2000-0635: Undefined Security Weakness

The viewpage.html sample page in the MiniVend shopping cart program allows remote attackers to execute arbitrary commands via shell metacharacters...

CVE-2000-0141: Undefined Security Weakness

Infopop Ultimate Bulletin Board UBB allows remote attackers to execute commands via shell metacharacters in the topic hidden field...

CVE-2000-0727: Undefined Security Weakness

xpdf PDF viewer client earlier than 0.91 does not properly launch a web browser for embedded URL's, which allows an attacker to execute arbitrary commands via a URL that contains shell metacharacters...

CVE-2000-0787: Undefined Security Weakness

IRC Xchat client versions 1.4.2 and earlier allows remote attackers to execute arbitrary commands by encoding shell metacharacters into a URL which XChat uses to launch a web browser...

CVE-2000-0585: Undefined Security Weakness

ISC DHCP client program dhclient allows remote attackers to execute arbitrary commands via shell metacharacters...

CVE-2000-0128: Undefined Security Weakness

The Finger Server 0.82 allows remote attackers to execute commands via shell metacharacters...

CVE-2000-0690

Auction Weaver CGI script 1.02 and earlier is affected by a remote command execution vulnerability: an attacker can inject shell metacharacters into the fromfile parameter to execute arbitrary commands. According to the PacketStorm entry, a patch exists (Auction Weaver 1.05). The NVD entry confir...

CVE-2000-0697: Undefined Security Weakness

The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execute commands via shell metacharacters...

CVE-2000-0690: Undefined Security Weakness

Auction Weaver CGI script 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the fromfile parameter...