CVE-2000-0010

WebWho+ whois.cgi program allows remote attackers to execute commands via shell metacharacters in the TLD parameter...

CVE-2000-0242

WindMail allows remote attackers to read arbitrary files or execute commands via shell metacharacters...

CVE-2000-0242

CVE-2000-0242 affects WindMail where the CGI component (windmail.exe) is vulnerable to remote command execution via shell metacharacters. The underlying issue allows an attacker over the network to read arbitrary files or execute arbitrary commands on the remote server through crafted input to th...

CVE-2000-0287

The BizDB CGI script bizdb-search.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the dbname parameter...

CVE-2000-0207

SGI InfoSearch CGI program infosrch.cgi allows remote attackers to execute commands via shell metacharacters...

CVE-2000-0207

CVE-2000-0207 affects SGI InfoSearch Infosrch.cgi where the fname parameter fails to sanitize input, enabling remote arbitrary command execution via shell metacharacters. This is a remote web-server issue likely yielding command execution under the web server user. Nessus notes describe the flaw ...

fcheck.txt

The short explanation: fcheck is a file integrity checker written in perl. It can send warnings to syslog via an external program such as logger1. Because it calls system with a scalar argument, a malicious user can cause it to execute programs by creating files with shell metacharacters in their...

CVE-2000-0296

fcheck allows local users to gain privileges by embedding shell metacharacters into file names that are processed by fcheck...

CVE-2000-0242

WindMail allows remote attackers to read arbitrary files or execute commands via shell metacharacters...

CVE-2000-0213

The Sambar server includes batch files ECHO.BAT and HELLO.BAT in the CGI directory, which allow remote attackers to execute commands via shell metacharacters...

CVE-2000-0188

EZShopper 3.0’s search.cgi is vulnerable to directory traversal and command injection. Remote attackers can read arbitrary files via a .. path and may execute shell commands through metacharacters. The Nessus entry also mentions directory traversal in loadpage.cgi and possible arbitrary command e...

CVE-2000-0177

CVE-2000-0177 concerns DNSTools CGI applications where remote attackers can execute arbitrary commands due to shell metacharacters. The issue is described across NVD and CVE records as enabling complete compromise (C, I, A) with network access and no authentication, yielding a very high risk (CVS...

CVE-2000-0213

The Sambar server is affected by CVE-2000-0213 due to batch files in the CGI directory (hello.bat and echo.bat) that allow remote attackers to execute commands via shell metacharacters. The Nessus plugin confirms these scripts enable arbitrary code execution with the web server’s privileges, iden...

CVE-2000-0177

DNSTools CGI applications allow remote attackers to execute arbitrary commands via shell metacharacters...

CVE-2000-0207

SGI InfoSearch CGI program infosrch.cgi allows remote attackers to execute commands via shell metacharacters...

CVE-2000-0213

The Sambar server includes batch files ECHO.BAT and HELLO.BAT in the CGI directory, which allow remote attackers to execute commands via shell metacharacters...

CVE-2000-0141

Infopop Ultimate Bulletin Board UBB allows remote attackers to execute commands via shell metacharacters in the topic hidden field...

PT-2000-1126 · Infopop · Infopop Ultimate Bulletin Board

Name of the Vulnerable Software and Affected Versions: Infopop Ultimate Bulletin Board UBB affected versions not specified Description: The issue allows remote attackers to execute commands by injecting shell metacharacters into the topic hidden field. Recommendations: At the moment, there is no...

CVE-2000-0035

resend command in Majordomo allows local users to gain privileges via shell metacharacters...

CVE-1999-0983

The CVE-1999-0983 entry concerns the Whois Internic Lookup program’s whois.cgi, where the domain field accepts input that can be manipulated with shell metacharacters to execute commands remotely. Public sources in the connected documents confirm the vulnerability involves remote command executio...