DEBIAN-CVE-2004-1876

The "%f" feature in the VirusEvent directive in Clam AntiVirus daemon clamd before 0.70 allows local users to execute arbitrary commands via shell metacharacters in a file name...

PHP-ping - Count Command Execution

PHP-ping - Count Command Execution source: https://www.securityfocus.com/bid/9309/info It has been reported that php-ping may be prone to a remote command execution vulnerability that may allow remote attackers to execute commands on vulnerable systems. The problem exists due to insufficient...

BLNews 2.1.3 - Remote File Inclusion

BLNews 2.1.3 - Remote File Inclusion source: https://www.securityfocus.com/bid/7677/info It has been reported that BLNews is prone to a remote file include vulnerability. This is due to the incorrection initilization of some PHP headers within the application. As a result, an attacker may be...

Samba 2.2.x - call_trans2open Remote Buffer Overflow (4)

Samba 2.2.x - calltrans2open Remote Buffer Overflow 4 source: https://www.securityfocus.com/bid/7294/info A buffer overflow vulnerability has been reported for Samba. The problem occurs when copying user-supplied data into a static buffer. By passing excessive data to an affected Samba server, it...

CVE-2003-0065

The uxterm terminal emulator allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitra...

CVE-2001-0720

CVE-2001-0720 affects Internet Explorer 5.1 for Macintosh on Mac OS X. The issue allows remote execution of arbitrary commands by triggering the download of a BinHex or MacBinary file type that is executed if automatic decoding is enabled. The vulnerability arises in how the browser handles certa...

DistCC Daemon Command Execution

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

CVE-2001-0482

The CVE-2001-0482 entry concerns Argus PitBull LX. It describes a configuration error that lets root bypass access controls and potentially cause a denial of service or run arbitrary commands by altering kernel tunables (MaxFiles, MaxInodes, ModProbePath) in /proc/sys via sysctl. The connected re...

CVE-2001-0476

Aspseek vulnerable component: s.cgi in Aspseek 1.03 and earlier. Root cause: multiple buffer overflows in s.cgi allow remote attackers to execute arbitrary commands via (1) a long HTTP query string or (2) a long tmpl parameter. Impact: remote command execution with partial confidentiality/integri...

Microsoft IIS 3.04.05.0 - PWS Escaped Characters Decoding Command Execution (6)

Microsoft IIS 3.04.05.0 - PWS Escaped Characters Decoding Command Execution 6 source: https://www.securityfocus.com/bid/2708/info Due to a flaw in the handling of CGI filename program requests, remote users can execute arbitrary commands on an IIS host. When IIS receives a CGI filename request, i...

CVE-2001-0194

CVE-2001-0194: A buffer overflow in the httpGets function of CUPS 1.1.5 allows remote attackers to execute arbitrary commands via a long input line. The vulnerability affects CUPS 1.1.5 and is rated high severity (CVSS vector: Network, No authentication, all confidentiality/integrity/availability...

CVE-2000-0523

The CVE-2000-0523 entry describes a buffer overflow in the logging feature of EServ versions 2.9.2 and earlier. The vulnerability allows an attacker to execute arbitrary commands via a long MKD command. Primary documentation indicates impact as arbitrary command execution with a high-severity sco...

CVE-2000-1096

crontab by Paul Vixie uses predictable file names for a temporary file and does not properly ensure that the file is owned by the user executing the crontab -e command, which allows local users with write access to the crontab spool directory to execute arbitrary commands by creating...

Дырка в mailman

Недостаточная проверка ввода пользователя на наличие shell-символов дает возможность администраторам списков выполнять команды на сервере...

CVE-2000-0595

libedit searches for the .editrc file in the current directory instead of the user's home directory, which may allow local users to execute arbitrary commands by installing a modified .editrc in another directory...

Computer Software Manufaktur Alibaba 2.0 - Piped Command

Computer Software Manufaktur Alibaba 2.0 - Piped Command source: https://www.securityfocus.com/bid/1485/info Alibaba Web Server fails to filter piped commands when executing cgi-scripts. This can be used to execute commands with the privileges of the web server process on a target machine...

CVE-2000-0327

Technical details for CVE-2000-0327 are not publicly provided in the supplied documents; monitor for updates.

Выполнение команд через pine

К письму может быть прикреплен файл, содержащий скрипт, который будет выполнен с привилегиями пользователя pine...

ms.odbc.coldfusion.txt

Date: Tue, 1 Jun 1999 11:45:35 -0700 From: [email protected] To: [email protected] Subject: New Allaire Security Bulletin ASB99-09 Dear Allaire Customer -- We have recently become aware of a serious security vulnerability that may affect customers using Microsoft Access with ColdFusion...

Oracle 8 8.1.5 - Intelligent Agent (2)

// source: https://www.securityfocus.com/bid/585/info A vulnerability in the Oracle Intelligent Agent allows local malicious users to execute arbitrary commands and to create world writable files as the root user. The problem lies in the dbsnmp program located in $ORACLEHOME/bin . This setuid roo...