5658 matches found
CVE-2001-1179
xman allows local users to gain privileges by modifying the MANPATH to point to a man page whose filename contains shell metacharacters...
CVE-2001-1206
Matrix CGI vault Last Lines 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the $errorlog variable...
CVE-2001-1114: Undefined Security Weakness
book.cgi in NetCode NC Book 0.2b allows remote attackers to execute arbitrary commands via shell metacharacters in the "current" parameter...
CVE-2001-1206: Undefined Security Weakness
Matrix CGI vault Last Lines 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the $errorlog variable...
CVE-2001-1214: Undefined Security Weakness
manual.php in Marcus S. Xenakis Unix Manual 1.0 allows remote attackers to execute arbitrary code via a URL that contains shell metacharacters...
CVE-2001-1179: Undefined Security Weakness
xman allows local users to gain privileges by modifying the MANPATH to point to a man page whose filename contains shell metacharacters...
CVE-1999-1512
The CVE-1999-1512 entry concerns the AMaViS virus scanner, specifically versions 0.2.0-pre4 and earlier. The documented vulnerability allows remote attackers to execute arbitrary commands as root by sending an infected mail message containing shell metacharacters in the reply-to field. The availa...
CVE-2001-0461
CVE-2001-0461 affects the Free On-Line Dictionary of Computing (FOLDOC) template.cgi. Remote attackers can read files and execute commands by injecting shell metacharacters in the template.cgi argument. This is documented in NVD/CVE records; no remediation/patch details are provided in the connec...
CVE-2001-0980
docview before 1.0-15 allows remote attackers to execute arbitrary commands via shell metacharacters that are processed when converting a man page to a web page...
CVE-1999-1512
The AMaViS virus scanner 0.2.0-pre4 and earlier allows remote attackers to execute arbitrary commands as root via an infected mail message with shell metacharacters in the reply-to field...
CVE-1999-1542: Undefined Security Weakness
RPMMail before 1.4 allows remote attackers to execute commands via an e-mail message with shell metacharacters in the "MAIL FROM" command...
CVE-1999-1333: Undefined Security Weakness
automatic download option in ncftp 2.4.2 FTP client in Red Hat Linux 5.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the names of files that are to be downloaded...
CVE-1999-1512: Undefined Security Weakness
The AMaViS virus scanner 0.2.0-pre4 and earlier allows remote attackers to execute arbitrary commands as root via an infected mail message with shell metacharacters in the reply-to field...
CVE-2001-0461: Undefined Security Weakness
template.cgi in Free On-Line Dictionary of Computing FOLDOC allows remote attackers to read files and execute commands via shell metacharacters in the argument to template.cgi...
CVE-2001-0980: Undefined Security Weakness
docview before 1.0-15 allows remote attackers to execute arbitrary commands via shell metacharacters that are processed when converting a man page to a web page...
CVE-2001-0930
Technical details about CVE-2001-0930 are not publicly provided in the connected documents. Monitor for updates to confirm affected products, impact and remediation when additional details become available.
CVE-2001-0937
CVE-2001-0937 concerns PGPMail.pl CGI (up to version 1.31) where the recipient and pgpuserid CGI variables are not properly filtered before being passed to shell commands. This allows remote attackers to execute arbitrary commands on the server with the web server’s privileges. OpenVAS and Nessus...
CVE-2001-1014
CVE-2001-1014 concerns the E-Shop (WebDiscount) CGI used by eshop.pl. The OpenVAS NASL entry documents a vulnerability in the WebDiscount CGI that allows remote attackers to execute arbitrary commands with the web server’s privileges by supplying shell metacharacters in the seite parameter. This ...