4086 matches found
CVE-2008-4796
The httpsrequest function Snoopy/Snoopy.class.php in Snoopy 1.2.3 and earlier, as used in 1 ampache, 2 libphp-snoopy, 3 mahara, 4 mediamate, 5 opendb, 6 pixelpost, and possibly other products, allows remote attackers to execute arbitrary commands via shell metacharacters in https URLs...
CVE-2008-4796
The CVE-2008-4796 issue concerns the _httpsrequest function in Snoopy (Snoopy.class.php) of Snoopy 1.2.3 and earlier, used by Nagios Core and related products (e.g., Nagios-related components referenced in connected records). The vulnerability allows remote attackers to execute arbitrary commands...
CVE-2008-4796
The httpsrequest function Snoopy/Snoopy.class.php in Snoopy 1.2.3 and earlier, as used in 1 ampache, 2 libphp-snoopy, 3 mahara, 4 mediamate, 5 opendb, 6 pixelpost, and possibly other products, allows remote attackers to execute arbitrary commands via shell metacharacters in https URLs...
CVE-2008-4796
The httpsrequest function Snoopy/Snoopy.class.php in Snoopy 1.2.3 and earlier, as used in 1 ampache, 2 libphp-snoopy, 3 mahara, 4 mediamate, 5 opendb, 6 pixelpost, and possibly other products, allows remote attackers to execute arbitrary commands via shell metacharacters in https URLs...
DEBIAN-CVE-2008-4641
The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows attackers to execute arbitrary commands via shell metacharacters in unspecified input...
CVE-2008-4641
The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows attackers to execute arbitrary commands via shell metacharacters in unspecified input...
Input validation
The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows attackers to execute arbitrary commands via shell metacharacters in unspecified input...
CVE-2008-4641
CVE-2008-4641 affects the jhead utility (before 2.84) where DoCommand mishandles input, allowing execution of arbitrary shell commands via shell metacharacters. Public advisories across distributions (openSUSE, Fedora, Mandriva, SUSE/NASL) show the issue being addressed by updated jhead packages ...
CVE-2008-4641
The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows attackers to execute arbitrary commands via shell metacharacters in unspecified input...
CVE-2008-4641
The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows attackers to execute arbitrary commands via shell metacharacters in unspecified input...
CVE-2008-3432
Heap-based buffer overflow in the mchexpandwildcards function in osunix.c in Vim 6.2 and 6.3 allows user-assisted attackers to execute arbitrary code via shell metacharacters in filenames, as demonstrated by the netrw.v3 test case...
CVE-2008-3432
Heap-based buffer overflow in the mchexpandwildcards function in osunix.c in Vim 6.2 and 6.3 allows user-assisted attackers to execute arbitrary code via shell metacharacters in filenames, as demonstrated by the netrw.v3 test case...
Heap overflow
Heap-based buffer overflow in the mchexpandwildcards function in osunix.c in Vim 6.2 and 6.3 allows user-assisted attackers to execute arbitrary code via shell metacharacters in filenames, as demonstrated by the netrw.v3 test case...
CVE-2008-3432
CVE-2008-3432 describes a heap-based overflow in Vim’s mch_expand_wildcards (os_unix.c) on Vim 6.2/6.3 that can allow remote code execution via shell metacharacters in filenames. Connected advisories (RHSA-2008:0617, Oracle Linux ELSA-2008-0617, Scientific Linux updates) confirm Vim patches exist...
PT-2008-4835 · Vim +1 · Vim +1
Name of the Vulnerable Software and Affected Versions: Vim versions 6.2 through 6.3 Description: The issue is related to a heap-based buffer overflow in the mch expand wildcards function, which can be exploited by user-assisted attackers to execute arbitrary code via shell metacharacters in...
CVE-2008-4318
Observer 0.3.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter to 1 whois.php or 2 netcmd.php...
Code injection
Observer 0.3.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter to 1 whois.php or 2 netcmd.php...
CVE-2008-4318
Observer 0.3.2.1 and earlier are affected by CVE-2008-4318, where remote attackers can execute arbitrary commands by injecting shell metacharacters into the query parameter of whois.php or netcmd.php. The vulnerability is reported as a vulnerable remote command execution in these PHP scripts, but...