2191 matches found
CVE-2000-0197
The Windows NT scheduler uses the drive mapping of the interactive user who is currently logged onto the system, which allows the local user to gain privileges by providing a Trojan horse batch file in place of the original batch file...
CVE-2000-0197
The CVE-2000-0197 entry describes a local privilege escalation in Windows NT where the scheduler uses the drive mapping of the currently logged-in interactive user. A local attacker could gain privileges by placing a Trojan horse batch file in place of the original batch file, enabling execution ...
Oracle Web Listener 4.0.x - for NT Batch File
Oracle Web Listener 4.0.x - for NT Batch File source: https://www.securityfocus.com/bid/1053/info Oracle Web Listener for NT makes use of various batch files as cgi scripts, which are stored in the /ows-bin/ directory by default. Any of these batch files can be used to run arbitrary commands on t...
Oracle Web Listener 4.0.x - for NT Batch File
source: https://www.securityfocus.com/bid/1053/info Oracle Web Listener for NT makes use of various batch files as cgi scripts, which are stored in the /ows-bin/ directory by default. Any of these batch files can be used to run arbitrary commands on the server, simply by appending '?&' and a...
CVE-2000-0213
The Sambar server includes batch files ECHO.BAT and HELLO.BAT in the CGI directory, which allow remote attackers to execute commands via shell metacharacters...
CVE-2000-0197
The Windows NT scheduler uses the drive mapping of the interactive user who is currently logged onto the system, which allows the local user to gain privileges by providing a Trojan horse batch file in place of the original batch file...
CVE-1999-0337
AIX batch queue bsh allows local and remote users to gain additional privileges when network printing is enabled...
CVE-1999-0337
The connected records describe CVE-1999-0337 as a vulnerability in IBM AIX’s batch queue (bsh) where network printing enabled allows local and remote users to gain additional privileges. The Red Hat and NVD entries repeat the same effect; no concrete root-cause, affected version ranges, or patch/...
Microsoft IIS 1.0 Netscape Server 1.01.12 OReilly WebSite Professional 1.1b - .cmd .CMD Remote Command Execution
Microsoft IIS 1.0 Netscape Server 1.01.12 OReilly WebSite Professional 1.1b - .cmd .CMD Remote Command Execution IIS 1.0,Netscape Commerce Server 1.0/Communications Server 1.12,OReilly Software WebSite Professional 1.1 b BAT/.CMD Remote Command Execution source:...
Microsoft IIS 1.0 / Netscape Server 1.0/1.12 / OReilly WebSite Professional 1.1b - '.cmd' / '.CMD' Remote Command Execution
IIS 1.0,Netscape Commerce Server 1.0/Communications Server 1.12,OReilly Software WebSite Professional 1.1 b BAT/.CMD Remote Command Execution source: https://www.securityfocus.com/bid/2023/info Some web servers that allow batch files to be executed via CGI are vulnerable to an attack whereby an...