DEBIAN-CVE-2013-1362

Incomplete blacklist vulnerability in nrpc.c in Nagios Remote Plug-In Executor NRPE before 2.14 might allow remote attackers to execute arbitrary shell commands via "$" shell metacharacters, which are processed by bash...

CVE-2013-1362

Incomplete blacklist vulnerability in nrpc.c in Nagios Remote Plug-In Executor NRPE before 2.14 might allow remote attackers to execute arbitrary shell commands via "$" shell metacharacters, which are processed by bash...

UBUNTU-CVE-2013-1362

Incomplete blacklist vulnerability in nrpc.c in Nagios Remote Plug-In Executor NRPE before 2.14 might allow remote attackers to execute arbitrary shell commands via "$" shell metacharacters, which are processed by bash...

CVE-2013-1362

Incomplete blacklist vulnerability in nrpc.c in Nagios Remote Plug-In Executor NRPE before 2.14 might allow remote attackers to execute arbitrary shell commands via "$" shell metacharacters, which are processed by bash...

Input validation

Incomplete blacklist vulnerability in nrpc.c in Nagios Remote Plug-In Executor NRPE before 2.14 might allow remote attackers to execute arbitrary shell commands via "$" shell metacharacters, which are processed by bash...

CVE-2013-1362

Incomplete blacklist vulnerability in nrpc.c in Nagios Remote Plug-In Executor NRPE before 2.14 might allow remote attackers to execute arbitrary shell commands via "$" shell metacharacters, which are processed by bash...

CVE-2013-1362

Nrpe (Nagios NRPE) is affected by CVE-2013-1362 due to an incomplete blacklist in nrpc.c, enabling remote arbitrary command execution via $() metacharacters. Arch Linux ASA-201801-14 specifies the fix: upgrade nrpe to 3.2.1-3 (for NRPE >= 3.2.1-3) and notes a workaround: disable the dont_blame...

CVE-2013-1362

Incomplete blacklist vulnerability in nrpc.c in Nagios Remote Plug-In Executor NRPE before 2.14 might allow remote attackers to execute arbitrary shell commands via "$" shell metacharacters, which are processed by bash...

CVE-2013-1362: Improper Input Validation

Incomplete blacklist vulnerability in nrpc.c in Nagios Remote Plug-In Executor NRPE before 2.14 might allow remote attackers to execute arbitrary shell commands via "$" shell metacharacters, which are processed by bash...

CVE-2013-4731

ajax.cgi in the web interface on the Choice Wireless Green Packet WIXFMR-111 4G WiMax modem allows remote attackers to execute arbitrary commands via shell metacharacters in the pip parameter in an Ajax tagipPing request, a different vulnerability than CVE-2013-3581...

Cross site request forgery (csrf)

ajax.cgi in the web interface on the Choice Wireless Green Packet WIXFMR-111 4G WiMax modem allows remote attackers to execute arbitrary commands via shell metacharacters in the pip parameter in an Ajax tagipPing request, a different vulnerability than CVE-2013-3581...

CVE-2013-4731

ajax.cgi in the web interface on the Choice Wireless Green Packet WIXFMR-111 4G WiMax modem allows remote attackers to execute arbitrary commands via shell metacharacters in the pip parameter in an Ajax tagipPing request, a different vulnerability than CVE-2013-3581...

CVE-2013-4731

CVE-2013-4731 affects the Choice Wireless Green Packet WIXFMR-111 4G WiMax modem. The vulnerability is in the web interface’s ajax.cgi. It allows remote attackers to execute arbitrary commands by injecting shell metacharacters in the pip parameter of an Ajax tag_ipPing request. This is a distinct...

PT-2013-5164

Name of the Vulnerable Software and Affected Versions Choice Wireless Green Packet WIXFMR-111 4G WiMax modem affected versions not specified Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the pip parameter in an "Ajax tag ipPing" request...

CVE-2013-4096

ServerAdmin/TestTelnetConnection.jsp in DS3 Authentication Server allows remote authenticated users to execute arbitrary commands via shell metacharacters in the HOSTNAME field...

Authentication flaw

ServerAdmin/TestTelnetConnection.jsp in DS3 Authentication Server allows remote authenticated users to execute arbitrary commands via shell metacharacters in the HOSTNAME field...

CVE-2013-4096

The CVE-2013-4096 issue affects the DS3 Authentication Server’s ServerAdmin/TestTelnetConnection.jsp where remote authenticated users can execute arbitrary commands by injecting shell metacharacters into HOST_NAME. The NVD entry documents a high impact (CVSSv2 9.0, network access, no authenticati...

CVE-2013-4096

ServerAdmin/TestTelnetConnection.jsp in DS3 Authentication Server allows remote authenticated users to execute arbitrary commands via shell metacharacters in the HOSTNAME field...

CVE-2013-4096: Improper Input Validation

ServerAdmin/TestTelnetConnection.jsp in DS3 Authentication Server allows remote authenticated users to execute arbitrary commands via shell metacharacters in the HOSTNAME field...

PT-2013-4849

Name of the Vulnerable Software and Affected Versions DS3 Authentication Server affected versions not specified Description The issue allows remote authenticated users to execute arbitrary commands via shell metacharacters in the HOST NAME field in the ServerAdmin/TestTelnetConnection.jsp page...