CVE-2001-1160

udirectory.pl in Microburst Technologies uDirectory 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the categoryfile field...

CVE-2001-1343

wsmail.cgi in WebStore 400/400CS 4.14 allows remote authenticated WebStore administrators to execute arbitrary code via shell metacharacters in the kill parameter...

CVE-2001-1277

makewhatis in the man package before 1.5i2 allows an attacker in group man to overwrite arbitrary files via a man page whose name contains shell metacharacters...

CVE-2001-0370

CVE-2001-0370 affects the fcheck tool prior to version 2.57.59. The vulnerability arises because it calls the file signature checking program insecurely, allowing a local user to execute arbitrary commands by providing a file name containing shell metacharacters. This is a local-elevation style i...

CVE-2001-0400

nph-maillist.pl allows remote attackers to execute arbitrary commands via shell metacharacters "" in the email address...

CVE-2001-0329

Bugzilla 2.10 allows remote attackers to execute arbitrary commands via shell metacharacters in a username that is then processed by 1 the Bugzillalogin cookie in postbug.cgi, or 2 the who parameter in processbug.cgi...

CVE-2001-0400

CVE-2001-0400 affects the script nph-maillist.pl , where remote attackers can execute arbitrary commands by injecting shell metacharacters ("`") into the email address. Public records in the connected OpenVAS entries refer to nph-publish.cgi with a known flaw that allows command execution with th...

CVE-2001-0370

fcheck prior to 2.57.59 calls the file signature checking program insecurely, which can allow a local user to run arbitrary commands via a file name that contains shell metacharacters...

CVE-2001-0274

kicq IRC client 1.0.0, and possibly later versions, allows remote attackers to execute arbitrary commands via shell metacharacters in a URL...

CVE-2001-0100

bslist.cgi mailing list script allows remote attackers to execute arbitrary commands via shell metacharacters in the email address...

CVE-2001-0021

MailMan Webmail 3.0.25 and earlier is affected by an arbitrary command execution vulnerability in mmstdod.cgi. Input to the ALTERNATE_TEMPLATES/alternate_template parameters is not properly sanitized, allowing a remote attacker to execute arbitrary commands. The issue is documented in CVE-2001-00...

CVE-2001-0274

kicq IRC client 1.0.0, and possibly later versions, allows remote attackers to execute arbitrary commands via shell metacharacters in a URL...

CVE-2001-0271

mailnews.cgi 1.3 and earlier allows remote attackers to execute arbitrary commands via a user name that contains shell metacharacters...

Дырка в bugzilla (shell metacharacters)

Недостаточная проверка ввода пользователя приводит к возможности выполнения команд на сервере...

OpenBSD 2.x < 2.8 FTPd - 'glob()' Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/2548/info The BSD ftp daemon and derivatives such as IRIX ftpd or the ftp daemon shipped with Kerberos 5 contain a number of buffer overflows that may lead to a compromise of root access to malicious users. During parsing operations, the ftp daemon...

FreeBSD 2.2-4.2 / NetBSD 1.2-4.5 / OpenBSD 2.x - FTPd 'glob()' Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/2548/info The BSD ftp daemon and derivatives such as IRIX ftpd or the ftp daemon shipped with Kerberos 5 contain a number of buffer overflows that may lead to a compromise of root access to malicious users. During parsing operations, the ftp daemon...

CVE-2001-0271

CVE-2001-0271 affects mailnews.cgi (version 1.3 and earlier). The vulnerability allows remote attackers to execute arbitrary commands by supplying a user name that contains shell metacharacters. This is a remote command-execution flaw with high impact (complete confidentiality, integrity, and ava...

CVE-2001-0307

Bajie HTTP JServer 0.78, and other versions before 0.80, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request for a CGI program that does not exist...

CVE-2001-0271

mailnews.cgi 1.3 and earlier allows remote attackers to execute arbitrary commands via a user name that contains shell metacharacters...

CVE-2001-0216

The CVE-2001-0216 issue affects the PALS Library System pals-cgi program. The vulnerability arises from shell metacharacters in the documentName parameter, enabling remote attackers to execute arbitrary commands via the CGI. NVD data indicates a NETWORK attack vector with LOW complexity and no au...