CVE-2000-0952: Undefined Security Weakness

global.cgi CGI program in Global 3.55 and earlier on NetBSD allows remote attackers to execute arbitrary commands via shell metacharacters...

CVE-2000-0910: Undefined Security Weakness

Horde library 1.02 allows attackers to execute arbitrary commands via shell metacharacters in the "from" address...

CVE-2000-0923: Undefined Security Weakness

authenticate.cgi CGI program in Aplio PRO allows remote attackers to execute arbitrary commands via shell metacharacters in the password parameter...

CVE-2000-0941: Undefined Security Weakness

Kootenay Web KW Whois 1.0 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the "whois" parameter...

CVE-2000-1068

pollit.cgi in Poll It 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the polloptions parameter...

Дырка в rcp (unparsed shell characters) в linux

Некорректный разбор метасимволов...

CVE-2000-0861

Mailman 1.1 allows list administrators to execute arbitrary commands via shell metacharacters in the %listname macro expansion...

Kootenay Web Inc whois 1.0 - Remote Command Execution

Kootenay Web Inc whois 1.0 - Remote Command Execution source: https://www.securityfocus.com/bid/1883/info whois is a utility used to find general information and technical details about registered domain names. A vulnerability exists in Kootenay Web Inc's Whois release v.1.9, a web interface to...

CVE-2000-0727

xpdf PDF viewer client earlier than 0.91 does not properly launch a web browser for embedded URL's, which allows an attacker to execute arbitrary commands via a URL that contains shell metacharacters...

CVE-2000-0787

IRC Xchat client versions 1.4.2 and earlier allows remote attackers to execute arbitrary commands by encoding shell metacharacters into a URL which XChat uses to launch a web browser...

CVE-2000-0064

The CVE-2000-0064 issue affects Nortel Contivity HTTP Server, specifically the cgiproc CGI script. The underlying problem is a vulnerability in cgiproc where a malformed URL containing shell metacharacters can crash the remote host, causing a denial of service. Affected component: cgiproc CGI scr...

CVE-2000-0141

Infopop Ultimate Bulletin Board (UBB) is affected by CVE-2000-0141. The vulnerability allows remote attackers to execute commands by injecting shell metacharacters into the topic hidden field. Connected sources corroborate that this affects Infopop UBB, with the PT-2000-1126 entry noting that aff...

CVE-2000-0322

The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package is vulnerable to arbitrary command execution via shell metacharacters. This flaw affects Red Hat 6.2 systems running the Piranha LVS cluster service and GUI (specifically the piranha and piranha-gui rpm packages). An authent...

CVE-2000-0466

Affected software: AIX cdmount (part of UMS) on AIX systems. The issue arises from insecure handling of user-supplied arguments in cdmount, which spawns a shell to invoke the mount command with those arguments, allowing local users to execute arbitrary commands as root (SUID root wrapper). Impact...

CVE-2000-0585

CVE-2000-0585 affects the ISC DHCP client program dhclient. The flaw allows remote attackers to execute arbitrary commands via shell metacharacters in DHCP responses. CVSS-2.0 base score is 10.0 (NETWORK, LOW ATTACK, NONE AUTH, C/I/A = COMPLETE). No remediation details are provided in the connect...

CVE-2000-0141

Infopop Ultimate Bulletin Board UBB allows remote attackers to execute commands via shell metacharacters in the topic hidden field...

CVE-2000-0635

The viewpage.html sample page in the MiniVend shopping cart program allows remote attackers to execute arbitrary commands via shell metacharacters...

CVE-2000-0727

xpdf PDF viewer client earlier than 0.91 does not properly launch a web browser for embedded URL's, which allows an attacker to execute arbitrary commands via a URL that contains shell metacharacters...

CVE-2000-0787

IRC Xchat client versions 1.4.2 and earlier allows remote attackers to execute arbitrary commands by encoding shell metacharacters into a URL which XChat uses to launch a web browser...

CVE-2000-0787

The CVE covers the IRC XChat client (versions ≤ 1.4.2). It describes a remote command execution where shell metacharacters embedded in a URL, used by XChat to launch a browser, can be exploited. The NVD notes a high impact (CVSS v2 base score 7.5) with network access and no authentication require...