Directory traversal in DocBook

During conversion to HTML identifuers are used to form a filename without check for ../...

CVE-2002-0094

configconverters.py in BSCW Basic Support for Cooperative Work 3.x and versions before 4.06 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name during filename conversion...

format string vulnerability protection bypass in libsafe

Not all of possible converion flags are processed...

Code execution bugs in virtual Java machines

Bug in data conversion routines...

CVE-2001-0980: Undefined Security Weakness

docview before 1.0-15 allows remote attackers to execute arbitrary commands via shell metacharacters that are processed when converting a man page to a web page...

CVE-1999-1357

Netscape Communicator 4.04 through 4.7 and possibly other versions in various UNIX operating systems converts the 0x8b character to a "" sign, which could allow remote attackers to attack other clients via cross-site scripting CSS in CGI programs that do not filter these characters...

Выполнение кода через LPRng (code execution)

При конфертации TeX файла не включается безопасный режим, что позволяет выполнение макрокоманд...

CVE-2001-0980

docview before 1.0-15 allows remote attackers to execute arbitrary commands via shell metacharacters that are processed when converting a man page to a web page...

Remote root против antisniff

Некорректное преобразование типов данных позволяет обойти проверку на размер строки и переполнить буфер...

DoS против knfsd в Linux

Некорректное преобразование между знаковыми/беззнаковыми величинами приводит к краху сервера...

CVE-1999-0997

wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g. tar or uncompress...

CVE-1999-0997

CVE-1999-0997 affects wu-ftpd with FTP conversion enabled. A malformed file name can be interpreted as an argument to the converter, enabling command execution (e.g., via tar or uncompress) and giving an attacker the ability to run arbitrary commands with wu-ftpd’s privileges. Related advisories ...

CVE-1999-0997: Undefined Security Weakness

wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g. tar or uncompress...

CVE-2000-0088

Buffer overflow in the conversion utilities for Japanese, Korean and Chinese Word 5 documents allows an attacker to execute commands, aka the "Malformed Conversion Data" vulnerability...

CVE-2000-0088

CVE-2000-0088 describes a buffer overflow in the conversion utilities for Word 5 documents (Japanese, Korean and Chinese) that allows a local attacker to execute arbitrary commands. The vulnerability is identified as the "Malformed Conversion Data" issue. The available references indicate a high ...

CVE-2000-0088: Undefined Security Weakness

Buffer overflow in the conversion utilities for Japanese, Korean and Chinese Word 5 documents allows an attacker to execute commands, aka the "Malformed Conversion Data" vulnerability...

CVE-2000-0088

Buffer overflow in the conversion utilities for Japanese, Korean and Chinese Word 5 documents allows an attacker to execute commands, aka the "Malformed Conversion Data" vulnerability...

CVE-1999-0997

wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g. tar or uncompress...

WU-FTPD 2.4.2/2.5 .0/2.6.0/2.6.1/2.6.2 - FTP Conversion

source: https://www.securityfocus.com/bid/2240/info Some FTP servers provide a "conversion" service that pipes a requested file through a program, for example a decompression utility such as "tar", before it is passed to the remote user. Under some configurations where this is enabled a remote us...

WU-FTPD 2.4.22.5 .02.6.02.6.12.6.2 - FTP Conversion

WU-FTPD 2.4.22.5 .02.6.02.6.12.6.2 - FTP Conversion source: https://www.securityfocus.com/bid/2240/info Some FTP servers provide a "conversion" service that pipes a requested file through a program, for example a decompression utility such as "tar", before it is passed to the remote user. Under...