CVE-2000-0296

The CVE-2000-0296 entry documents a local privilege-escalation flaw in fcheck, where embedding shell metacharacters in file names processed by fcheck can allow a local user to gain higher privileges. The description and connected records confirm the affected component is fcheck, with the underlyi...

CVE-2000-0910

Affected software: Horde library 1.02. Vulnerability: arbitrary commands can be executed via shell metacharacters in the from address. Root cause: lack of proper sanitization of shell metacharacters in the From field. Impact: potential remote code execution as implied by command execution in the ...

CVE-2000-1131

Bill Kendrick web site guestbook GBook allows remote attackers to execute arbitrary commands via shell metacharacters in the MAILTO form variable...

CVE-2000-1131

CVE-2000-1131 concerns Bill Kendrick’s web site guestbook (GBook), where remote Command Execution is possible via shell metacharacters in the _MAILTO form variable. The vulnerability stems from improper handling of user-supplied input, enabling arbitrary commands to be run on the server. Reported...

CVE-2000-0952

CVE-2000-0952 affects the Global CGI program, specifically global.cgi, in Global 3.55 and earlier on NetBSD. The vulnerability allows remote attackers to execute arbitrary commands via shell metacharacters in input handled by the CGI. Root cause: improper handling of shell input leading to comman...

CVE-2000-1068

The CVE-2000-1068 entry concerns Poll It 2.0: the pollit.cgi component is vulnerable to remote command execution via shell metacharacters supplied in the poll_options parameter. The underlying issue is improper handling of user-supplied input in that parameter, enabling an attacker to execute arb...

CVE-2000-0878

The mailto CGI script allows remote attacker to execute arbitrary commands via shell metacharacters in the emailadd form field...

CVE-2000-0252

The CVE-2000-0252 entry concerns the Dansie Shopping Cart (cart.pl/cart.cgi). An input in a form variable allows remote command execution through shell metacharacters, due to insufficient input sanitization. This yields the potential for arbitrary commands to be run on affected systems. Public re...

CVE-2000-0923

CVE-2000-0923 concerns the authenticate.cgi CGI in Aplio PRO, where remote attackers can execute arbitrary commands by injecting shell metacharacters into the password parameter. The entry lists a CVSS v2 base score of 7.5 (HIGH) with network access, low attack complexity, and no authentication. ...

CVE-2000-0296

fcheck allows local users to gain privileges by embedding shell metacharacters into file names that are processed by fcheck...

CVE-2000-0287

The BizDB CGI script bizdb-search.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the dbname parameter...

CVE-2000-0910

Horde library 1.02 allows attackers to execute arbitrary commands via shell metacharacters in the "from" address...

CVE-2000-1095

modprobe in the modutils 2.3.x package on Linux systems allows a local user to execute arbitrary commands via shell metacharacters...

CVE-2000-0923

authenticate.cgi CGI program in Aplio PRO allows remote attackers to execute arbitrary commands via shell metacharacters in the password parameter...

CVE-2000-0952

global.cgi CGI program in Global 3.55 and earlier on NetBSD allows remote attackers to execute arbitrary commands via shell metacharacters...

CVE-2000-1068

pollit.cgi in Poll It 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the polloptions parameter...

Дырка в rcp (unparsed shell characters) в linux

Некорректный разбор метасимволов...

CVE-2000-0861

Mailman 1.1 allows list administrators to execute arbitrary commands via shell metacharacters in the %listname macro expansion...

Kootenay Web Inc whois 1.0 - Remote Command Execution

Kootenay Web Inc whois 1.0 - Remote Command Execution source: https://www.securityfocus.com/bid/1883/info whois is a utility used to find general information and technical details about registered domain names. A vulnerability exists in Kootenay Web Inc's Whois release v.1.9, a web interface to...

CVE-2000-0727

xpdf PDF viewer client earlier than 0.91 does not properly launch a web browser for embedded URL's, which allows an attacker to execute arbitrary commands via a URL that contains shell metacharacters...