SUSE CVE-2020-6581

Nagios NRPE 3.2.1 has Insufficient Filtering because, for example, nastymetachars interprets \n as the character \ and the character n not as the \n newline sequence. This can cause command injection...

CVE-2020-6581

Nagios NRPE 3.2.1 has Insufficient Filtering because, for example, nastymetachars interprets \n as the character \ and the character n not as the \n newline sequence. This can cause command injection...

CVE-2020-6581

CVE-2020-6581 affects Nagios NRPE 3.2.1. The issue is insufficient filtering in the nasty_metachars handler, which can treat \n as a literal backslash-n, enabling command injection. Impact is disclosed as local access with potential partial to full control depending on context (per CVSS metrics: ...

PT-2020-19170

Name of the Vulnerable Software and Affected Versions Nagios NRPE version 3.2.1 Description The issue is related to insufficient filtering, where the nasty metachars function interprets as separate characters and n rather than a newline sequence. This can lead to command injection. Recommendation...

openSUSE Security Update : libsatsolver (libsatsolver-266)

A remotely exploitable code execution vulnerability via shell metachars has been fixed in libzypp. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libsatsolver-266. The text description of thi...

CVE-1999-0043

CVE-1999-0043 affects the INN daemon (innd) v1.5, where command execution is possible via shell metacharacters in control messages (e.g., "newgroup", "rmgroup"). Documents consistently reference INN 1.5 and shell metachar vulnerabilities; remediation guidance appears as upgrading to 1.6 or later....