1290 matches found
CVE-2002-0591
Directory traversal vulnerability in AOL Instant Messenger AIM 4.8 beta and earlier allows remote attackers to create arbitrary files and execute commands via a Direct Connection with an IMG tag with a SRC attribute that specifies the target filename...
CVE-2002-0134
Telnet proxy in Avirt Gateway Suite 4.2 does not require authentication for connecting to the proxy system itself, which allows remote attackers to list file contents of the proxy and execute arbitrary commands via a "dos" command...
CVE-1999-1535
Buffer overflow in AspUpload.dll in Persits Software AspUpload before 1.4.0.2 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long argument in the HTTP request...
CVE-2001-0717
CVE-2001-0717 is a format-string vulnerability in the ToolTalk RPC server rpc.ttdbserverd that permits remote command execution via syslog formatting. Public advisories (Sun, HP, IBM, SunOS/Solaris, AIX, SGI/IRIX, Xi Graphics, Caldera) describe vulnerable platforms and vendor patches. CORE/SECURE...
CVE-2001-0422
Buffer overflow in Xsun in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME environmental variable...
CVE-1999-1333
CVE-1999-1333 affects ncftp 2.4.2 and earlier on Red Hat Linux 5.0 and earlier. The automatic download option can be abused by remote attackers to execute arbitrary commands via shell metacharacters in the names of files to be downloaded. The provided documents do not specify a remediation versio...
CVE-2001-0992
shopplus.cgi in ShopPlus shopping cart allows remote attackers to execute arbitrary commands via shell metacharacters in the "file" parameter...
CVE-2001-1584
CardBoard 2.4 greeting card CGI by Michael Barretto allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient field...
CVE-2001-0930
Sendpage.pl allows remote attackers to execute arbitrary commands via a message containing shell metacharacters...
CVE-2001-0800
CVE-2001-0800 affects the IRIX lpsched service; IRIX 6.5.13f and earlier allow remote command execution via shell metacharacters. Public disclosures include a Metasploit module (tagprinter_exec) and exploit references, with SGI patch advisories available in the linked references. Affected compone...
CVE-1999-1479
The textcounter.pl by Matt Wright allows remote attackers to execute arbitrary commands via shell metacharacters...
CVE-1999-1128
The CVE-1999-1128 entry describes Internet Explorer 3.01 on Windows 95 as vulnerable. A .isp file is automatically downloaded and executed from remote malicious sites without user prompts, allowing remote arbitrary command execution. The available documents do not specify a remediation or patch, ...
CVE-1999-1549
Lynx 2.x is affected by CVE-1999-1549 due to not distinguishing internal vs external HTML. This can permit a local attacker to read a hidden, secure form value from a temporary file and craft a LYNXOPTIONS URL that causes Lynx to modify the user’s configuration file and execute commands. The PT S...
CVE-1999-1153
HAMcards Postcard CGI script 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient email address...
CVE-2001-0331
Buffer overflow in Embedded Support Partner ESP daemon rpc.espd in IRIX 6.5.8 and earlier allows remote attackers to execute arbitrary commands...
CVE-2001-0461
template.cgi in Free On-Line Dictionary of Computing FOLDOC allows remote attackers to read files and execute commands via shell metacharacters in the argument to template.cgi...
CVE-2001-0100
bslist.cgi mailing list script allows remote attackers to execute arbitrary commands via shell metacharacters in the email address...
CVE-2001-0233
Buffer overflow in micq client 0.4.6 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long Description field...