CVE-2000-0727: Undefined Security Weakness

xpdf PDF viewer client earlier than 0.91 does not properly launch a web browser for embedded URL's, which allows an attacker to execute arbitrary commands via a URL that contains shell metacharacters...

CVE-2000-0585: Undefined Security Weakness

ISC DHCP client program dhclient allows remote attackers to execute arbitrary commands via shell metacharacters...

CVE-2000-0690

Auction Weaver CGI script 1.02 and earlier is affected by a remote command execution vulnerability: an attacker can inject shell metacharacters into the fromfile parameter to execute arbitrary commands. According to the PacketStorm entry, a patch exists (Auction Weaver 1.05). The NVD entry confir...

CVE-2000-0697: Undefined Security Weakness

The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execute commands via shell metacharacters...

CVE-2000-0690: Undefined Security Weakness

Auction Weaver CGI script 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the fromfile parameter...

[SECURITY] New version of xpdf released

Package : xpdf Problem type : local exploit Debian-specific: no xpdf as distributed in Debian GNU/Linux 2.2 suffered from two problems: 1. creation of temporary files was not done safely which made xpdf vulnerable to a symlink attack. 2. when handling URLs in documents no checking was done for...

[SECURITY] New version of xpdf released

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman September 10, 2000 - ------------------------------------------------------------------------ Package : xpdf Problem type : local...

X-Chat 1.21.31.41.5 - Command Execution via URLs

X-Chat 1.21.31.41.5 - Command Execution via URLs source: https://www.securityfocus.com/bid/1601/info A vulnerability exists in versions 1.4.2 and earlier of the X-Chat IRC client. By supplying commands enclosed in backticks in URL's sent to X-Chat, it is possible to execute arbitrary commands...

X-Chat 1.2/1.3/1.4/1.5 - Command Execution via URLs

source: https://www.securityfocus.com/bid/1601/info A vulnerability exists in versions 1.4.2 and earlier of the X-Chat IRC client. By supplying commands enclosed in backticks in URL's sent to X-Chat, it is possible to execute arbitrary commands should the X-Chat user decide to view the link by...

CVE-2000-0370

The debug option in Caldera Linux smail allows remote attackers to execute commands via shell metacharacters in the -D option for the rmail command...

CVE-2000-0370

CVE-2000-0370 affects Caldera Linux smail. The debug option allows remote command execution via shell metacharacters in the -D option for rmail, enabling full compromise of confidentiality, integrity, and availability (CVSSv2 base score 10.0). Exploitation details are not provided in the availabl...

CVE-2000-0527

The CVE-2000-0527 entry concerns the MailStudio 2000 (and earlier) product where the CGI program userreg.cgi is vulnerable. An attacker could remotely execute arbitrary commands by injecting shell metacharacters, enabling full compromise of affected systems. The provided sources consistently desc...

CVE-2000-0432

The calender.pl and the calendaradmin.pl calendar scripts by Matt Kruse allow remote attackers to execute arbitrary commands via shell metacharacters...

CVE-2000-0352

Technical details about CVE-2000-0352 are not provided in the connected documents. The initial entry lists the Pine vulnerability but no additional specifics. Monitor for updates.

CVE-2000-0432

The CVE-2000-0432 issue affects the calendar CGI scripts by Matt Kruse, specifically calendar_admin.pl, which are susceptible to remote command execution via shell metacharacters. The Nessus entry confirms the vulnerable component as the calendar_admin.pl CGI installed in /cgi-bin, with a well-kn...

CVE-2000-0013: Undefined Security Weakness

IRIX soundplayer program allows local users to gain privileges by including shell metacharacters in a .wav file, which is executed via the midikeys program...

CVE-2000-0421: Undefined Security Weakness

The processbug.cgi script in Bugzilla allows remote attackers to execute arbitrary commands via shell metacharacters...

CVE-2000-0424: Undefined Security Weakness

The CGI counter 4.0.7 by George Burgyan allows remote attackers to execute arbitrary commands via shell metacharacters...

CVE-2000-0370: Undefined Security Weakness

The debug option in Caldera Linux smail allows remote attackers to execute commands via shell metacharacters in the -D option for the rmail command...

CVE-2000-0527: Undefined Security Weakness

userreg.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters...