CVE-2000-0787

IRC Xchat client versions 1.4.2 and earlier allows remote attackers to execute arbitrary commands by encoding shell metacharacters into a URL which XChat uses to launch a web browser...

CVE-2000-0635

The viewpage.html sample page in the MiniVend shopping cart program allows remote attackers to execute arbitrary commands via shell metacharacters...

CVE-2000-0128

The Finger Server 0.82 allows remote attackers to execute commands via shell metacharacters...

CVE-2000-0727

xpdf PDF viewer client earlier than 0.91 does not properly launch a web browser for embedded URL's, which allows an attacker to execute arbitrary commands via a URL that contains shell metacharacters...

CVE-2000-0322

The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package is vulnerable to arbitrary command execution via shell metacharacters. This flaw affects Red Hat 6.2 systems running the Piranha LVS cluster service and GUI (specifically the piranha and piranha-gui rpm packages). An authent...

CVE-2000-0141

Infopop Ultimate Bulletin Board (UBB) is affected by CVE-2000-0141. The vulnerability allows remote attackers to execute commands by injecting shell metacharacters into the topic hidden field. Connected sources corroborate that this affects Infopop UBB, with the PT-2000-1126 entry noting that aff...

CVE-2000-0141

Infopop Ultimate Bulletin Board UBB allows remote attackers to execute commands via shell metacharacters in the topic hidden field...

CVE-2000-0466

Affected software: AIX cdmount (part of UMS) on AIX systems. The issue arises from insecure handling of user-supplied arguments in cdmount, which spawns a shell to invoke the mount command with those arguments, allowing local users to execute arbitrary commands as root (SUID root wrapper). Impact...

CVE-2000-0787

The CVE covers the IRC XChat client (versions ≤ 1.4.2). It describes a remote command execution where shell metacharacters embedded in a URL, used by XChat to launch a browser, can be exploited. The NVD notes a high impact (CVSS v2 base score 7.5) with network access and no authentication require...

CVE-2000-0585

CVE-2000-0585 affects the ISC DHCP client program dhclient. The flaw allows remote attackers to execute arbitrary commands via shell metacharacters in DHCP responses. CVSS-2.0 base score is 10.0 (NETWORK, LOW ATTACK, NONE AUTH, C/I/A = COMPLETE). No remediation details are provided in the connect...

CVE-2000-0064

The CVE-2000-0064 issue affects Nortel Contivity HTTP Server, specifically the cgiproc CGI script. The underlying problem is a vulnerability in cgiproc where a malformed URL containing shell metacharacters can crash the remote host, causing a denial of service. Affected component: cgiproc CGI scr...

CVE-2000-0787

IRC Xchat client versions 1.4.2 and earlier allows remote attackers to execute arbitrary commands by encoding shell metacharacters into a URL which XChat uses to launch a web browser...

CVE-2000-0670: Undefined Security Weakness

The cvsweb CGI script in CVSWeb 1.80 allows remote attackers with write access to a CVS repository to execute arbitrary commands via shell metacharacters...

CVE-2000-0466: Undefined Security Weakness

AIX cdmount allows local users to gain root privileges via shell metacharacters...

CVE-2000-0322: Undefined Security Weakness

The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters...

CVE-2000-0064: Undefined Security Weakness

cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to cause a denial of service via a malformed URL that includes shell metacharacters...

CVE-2000-0635: Undefined Security Weakness

The viewpage.html sample page in the MiniVend shopping cart program allows remote attackers to execute arbitrary commands via shell metacharacters...

CVE-2000-0128: Undefined Security Weakness

The Finger Server 0.82 allows remote attackers to execute commands via shell metacharacters...

CVE-2000-0141: Undefined Security Weakness

Infopop Ultimate Bulletin Board UBB allows remote attackers to execute commands via shell metacharacters in the topic hidden field...

CVE-2000-0787: Undefined Security Weakness

IRC Xchat client versions 1.4.2 and earlier allows remote attackers to execute arbitrary commands by encoding shell metacharacters into a URL which XChat uses to launch a web browser...