FreeBSD Ports: twiki

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2008-3459

Unspecified vulnerability in OpenVPN 2.1-beta14 through 2.1-rc8, when running on non-Windows systems, allows remote servers to execute arbitrary commands via crafted 1 lladdr and 2 iproute configuration directives, probably related to shell metacharacters...

CVE-2008-3459

Unspecified vulnerability in OpenVPN 2.1-beta14 through 2.1-rc8, when running on non-Windows systems, allows remote servers to execute arbitrary commands via crafted 1 lladdr and 2 iproute configuration directives, probably related to shell metacharacters...

CVE-2008-3459

Unspecified vulnerability in OpenVPN 2.1-beta14 through 2.1-rc8, when running on non-Windows systems, allows remote servers to execute arbitrary commands via crafted 1 lladdr and 2 iproute configuration directives, probably related to shell metacharacters...

CVE-2008-3459: Undefined Security Weakness

Unspecified vulnerability in OpenVPN 2.1-beta14 through 2.1-rc8, when running on non-Windows systems, allows remote servers to execute arbitrary commands via crafted 1 lladdr and 2 iproute configuration directives, probably related to shell metacharacters...

vim6 -- heap-based overflow while parsing shell metacharacters

Description for CVE-2008-3432 says: Heap-based buffer overflow in the mchexpandwildcards function in osunix.c in Vim 6.2 and 6.3 allows user-assisted attackers to execute arbitrary code via shell metacharacters in filenames, as demonstrated by the netrw.v3 test case...

CVE-2008-3285: Improper Control of Generation of Code

The Filesys::SmbClientParser module 2.7 and earlier for Perl allows remote SMB servers to execute arbitrary code via a folder name containing shell metacharacters...

Code injection

The expandtemplate function in afuse.c in afuse 0.2 allows local users to gain privileges via shell metacharacters in a pathname...

CVE-2008-2232

The expandtemplate function in afuse.c in afuse 0.2 allows local users to gain privileges via shell metacharacters in a pathname...

CVE-2008-2232

The expandtemplate function in afuse.c in afuse 0.2 allows local users to gain privileges via shell metacharacters in a pathname...

DEBIAN-CVE-2008-2232

The expandtemplate function in afuse.c in afuse 0.2 allows local users to gain privileges via shell metacharacters in a pathname...

CVE-2008-2232

The expandtemplate function in afuse.c in afuse 0.2 allows local users to gain privileges via shell metacharacters in a pathname...

CVE-2008-2232

The expandtemplate function in afuse.c in afuse 0.2 allows local users to gain privileges via shell metacharacters in a pathname...

CVE-2008-2232: Undefined Security Weakness

The expandtemplate function in afuse.c in afuse 0.2 allows local users to gain privileges via shell metacharacters in a pathname...

CVE-2008-2575

cbrPager before 0.9.17 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a 1 ZIP aka .cbz or 2 RAR aka .cbr archive filename...

PT-2008-4030 · Cbrpager · Cbrpager

Name of the Vulnerable Software and Affected Versions: cbrPager versions prior to 0.9.17 Description: The issue allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a ZIP aka .cbz or RAR aka .cbr archive filename. Recommendations: For versions prior to...

CVE-2008-2575: Improper Neutralization of Special Elements used in an OS Command

cbrPager before 0.9.17 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a 1 ZIP aka .cbz or 2 RAR aka .cbr archive filename...

Code injection

Sun Java Active Server Pages ASP Server before 4.0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in HTTP requests to unspecified ASP applications...

CVE-2008-2405

CVE-2008-2405 affects Sun Java System Active Server Pages (ASP) Server prior to 4.0.3. The issue is that several of the administration ASP applications fail to filter or escape user input before using it to generate commands, allowing remote attackers to inject shell commands via HTTP requests to...

CVE-2008-2405: Improper Input Validation

Sun Java Active Server Pages ASP Server before 4.0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in HTTP requests to unspecified ASP applications...