CVE-2012-4076

CVE-2012-4076 affects Cisco NX-OS with a local-privilege escalation via shell metacharacters in a call to the system() library function. The issue arises from improper input handling during command processing (Bug IDs CSCtf23559 and CSCtf27780). Public sources describe that an authenticated, loca...

CVE-2012-4076

Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via shell metacharacters in a command that calls the system library function, aka Bug IDs CSCtf23559 and CSCtf27780...

CVE-2012-4076: Improper Input Validation

Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via shell metacharacters in a command that calls the system library function, aka Bug IDs CSCtf23559 and CSCtf27780...

Code injection

The self.rungpg function in lib/rgpg/gpghelper.rb in the rgpg gem before 0.2.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors...

CVE-2013-4203

The self.rungpg function in lib/rgpg/gpghelper.rb in the rgpg gem before 0.2.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors...

CVE-2013-4203

The CVE-2013-4203 issue affects the Ruby gem rgpg (self.run_gpg in lib/rgpg/gpg_helper.rb). It allows remote command execution via shell metacharacters because user input is not sanitized before passing to system(), affecting versions up to 0.2.2. The vulnerability can enable arbitrary commands o...

CVE-2013-2578

cgi-bin/admin/servetest in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12sign6 allows remote attackers to execute arbitrary commands via shell metacharacters in 1 the ServerName parameter and 2 other unspecified...

Code injection

cgi-bin/admin/servetest in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12sign6 allows remote attackers to execute arbitrary commands via shell metacharacters in 1 the ServerName parameter and 2 other unspecified...

CVE-2013-2578

cgi-bin/admin/servetest in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12sign6 allows remote attackers to execute arbitrary commands via shell metacharacters in 1 the ServerName parameter and 2 other unspecified...

CVE-2013-4203: Improper Control of Generation of Code

The self.rungpg function in lib/rgpg/gpghelper.rb in the rgpg gem before 0.2.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors...

PT-2013-3847

Name of the Vulnerable Software and Affected Versions TP-Link IP Cameras versions prior to beta firmware LM.1.6.18P12 sign6 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the ServerName parameter and other unspecified parameters in the...

PT-2013-4894

Name of the Vulnerable Software and Affected Versions rgpg gem versions prior to 0.2.3 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors. This is due to a problem in the self.run gpg function in lib/rgpg/gpg helper.rb...

CVE-2013-2578: Improper Neutralization of Special Elements used in an OS Command

cgi-bin/admin/servetest in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12sign6 allows remote attackers to execute arbitrary commands via shell metacharacters in 1 the ServerName parameter and 2 other unspecified...

PT-2013-1617

Name of the Vulnerable Software and Affected Versions Cisco NX-OS affected versions not specified Description The issue allows local users to gain privileges and execute arbitrary commands via shell metacharacters in a command that calls the system library function. This is due to poor processing...

CVE-2012-4075

Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via shell metacharacters in unspecified command parameters, aka Bug IDs CSCtf19827 and CSCtf27788...

Command injection

Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via shell metacharacters in unspecified command parameters, aka Bug IDs CSCtf19827 and CSCtf27788...

CVE-2012-4075

Cisco NX-OS contains an input-parsing vulnerability where parameters including special characters (e.g., back quotes) can be manipulated by an authenticated, local attacker to gain root-privilege access and execute arbitrary shell commands. This is associated with Bug IDs CSCtf19827 and CSCtf2778...

CVE-2012-4075: Improper Neutralization of Special Elements used in an OS Command

Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via shell metacharacters in unspecified command parameters, aka Bug IDs CSCtf19827 and CSCtf27788...

PT-2013-1616

Name of the Vulnerable Software and Affected Versions Cisco NX-OS affected versions not specified Description The issue allows local users to gain privileges and execute arbitrary commands via shell metacharacters in unspecified command parameters. This is due to poor processing of parameters tha...

CVE-2013-4984

The closeconnections function in /opt/cma/bin/clearkeys.pl in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows local users to gain privileges via shell metacharacters in the second argument...