SUSE CVE-2020-6581

Nagios NRPE 3.2.1 has Insufficient Filtering because, for example, nastymetachars interprets \n as the character \ and the character n not as the \n newline sequence. This can cause command injection...

CVE-2020-6581

Nagios NRPE 3.2.1 has Insufficient Filtering because, for example, nastymetachars interprets \n as the character \ and the character n not as the \n newline sequence. This can cause command injection...

CVE-2020-6581

CVE-2020-6581 affects Nagios NRPE 3.2.1. The issue is insufficient filtering in the nasty_metachars handler, which can treat \n as a literal backslash-n, enabling command injection. Impact is disclosed as local access with potential partial to full control depending on context (per CVSS metrics: ...

openSUSE Security Update : libsatsolver (libsatsolver-266)

A remotely exploitable code execution vulnerability via shell metachars has been fixed in libzypp. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libsatsolver-266. The text description of thi...

CVE-1999-0043

CVE-1999-0043 affects the INN daemon (innd) v1.5, where command execution is possible via shell metacharacters in control messages (e.g., "newgroup", "rmgroup"). Documents consistently reference INN 1.5 and shell metachar vulnerabilities; remediation guidance appears as upgrading to 1.6 or later....