Remote code execution via SuSE sysconfig

Invalid usage of DHCP client allows command execution by spoofing DHCP server reply...

CVE-2000-0787

IRC Xchat client versions 1.4.2 and earlier allows remote attackers to execute arbitrary commands by encoding shell metacharacters into a URL which XChat uses to launch a web browser...

warftp.txt

Thanks for the props Jarle. The current release beta of War-ftpd v1.70b seems to have some serious problems with the parsing of macros. The current version doesn't even seem to document the macros available, but in the response files sysmsg?.txt you are supposed to be able to put macros in the fo...