CVE-2000-0322

The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package is vulnerable to arbitrary command execution via shell metacharacters. This flaw affects Red Hat 6.2 systems running the Piranha LVS cluster service and GUI (specifically the piranha and piranha-gui rpm packages). An authent...

CVE-2000-0787

IRC Xchat client versions 1.4.2 and earlier allows remote attackers to execute arbitrary commands by encoding shell metacharacters into a URL which XChat uses to launch a web browser...

CVE-2000-0128

The Finger Server 0.82 allows remote attackers to execute commands via shell metacharacters...

CVE-2000-0585: Undefined Security Weakness

ISC DHCP client program dhclient allows remote attackers to execute arbitrary commands via shell metacharacters...

CVE-2000-0670: Undefined Security Weakness

The cvsweb CGI script in CVSWeb 1.80 allows remote attackers with write access to a CVS repository to execute arbitrary commands via shell metacharacters...

CVE-2000-0322: Undefined Security Weakness

The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters...

CVE-2000-0128: Undefined Security Weakness

The Finger Server 0.82 allows remote attackers to execute commands via shell metacharacters...

CVE-2000-0141: Undefined Security Weakness

Infopop Ultimate Bulletin Board UBB allows remote attackers to execute commands via shell metacharacters in the topic hidden field...

CVE-2000-0635: Undefined Security Weakness

The viewpage.html sample page in the MiniVend shopping cart program allows remote attackers to execute arbitrary commands via shell metacharacters...

CVE-2000-0466: Undefined Security Weakness

AIX cdmount allows local users to gain root privileges via shell metacharacters...

CVE-2000-0787: Undefined Security Weakness

IRC Xchat client versions 1.4.2 and earlier allows remote attackers to execute arbitrary commands by encoding shell metacharacters into a URL which XChat uses to launch a web browser...

CVE-2000-0727: Undefined Security Weakness

xpdf PDF viewer client earlier than 0.91 does not properly launch a web browser for embedded URL's, which allows an attacker to execute arbitrary commands via a URL that contains shell metacharacters...

CVE-2000-0064: Undefined Security Weakness

cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to cause a denial of service via a malformed URL that includes shell metacharacters...

CVE-2000-0690

Auction Weaver CGI script 1.02 and earlier is affected by a remote command execution vulnerability: an attacker can inject shell metacharacters into the fromfile parameter to execute arbitrary commands. According to the PacketStorm entry, a patch exists (Auction Weaver 1.05). The NVD entry confir...

CVE-2000-0697: Undefined Security Weakness

The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execute commands via shell metacharacters...

CVE-2000-0690: Undefined Security Weakness

Auction Weaver CGI script 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the fromfile parameter...

[SECURITY] New version of xpdf released

Package : xpdf Problem type : local exploit Debian-specific: no xpdf as distributed in Debian GNU/Linux 2.2 suffered from two problems: 1. creation of temporary files was not done safely which made xpdf vulnerable to a symlink attack. 2. when handling URLs in documents no checking was done for...

[SECURITY] New version of xpdf released

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman September 10, 2000 - ------------------------------------------------------------------------ Package : xpdf Problem type : local...

X-Chat 1.21.31.41.5 - Command Execution via URLs

X-Chat 1.21.31.41.5 - Command Execution via URLs source: https://www.securityfocus.com/bid/1601/info A vulnerability exists in versions 1.4.2 and earlier of the X-Chat IRC client. By supplying commands enclosed in backticks in URL's sent to X-Chat, it is possible to execute arbitrary commands...

X-Chat 1.2/1.3/1.4/1.5 - Command Execution via URLs

source: https://www.securityfocus.com/bid/1601/info A vulnerability exists in versions 1.4.2 and earlier of the X-Chat IRC client. By supplying commands enclosed in backticks in URL's sent to X-Chat, it is possible to execute arbitrary commands should the X-Chat user decide to view the link by...