5227 matches found
CVE-1999-1383
CVE-1999-1383 affects bash (before 1.14.7) and tcsh (6.05). The vulnerability arises when a directory name contains shell metacharacters (back-tick) that are expanded during filename expansion for the PS1 variable, allowing local users to gain privileges. Affects local privilege escalation via di...
CVE-1999-1063
The CVE-1999-1063 entry concerns the CDomain whois_raw.cgi CGI script, where the fqdn parameter accepts shell metacharacters, enabling remote attackers to execute arbitrary commands. This is evidenced by the core description and corroborated by the Nessus NASL entry for CDomainFree’s whois_raw.cg...
CVE-1999-1155: Undefined Security Weakness
LakeWeb Mail List CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient email address...
CVE-1999-1436: Undefined Security Weakness
Ray Chan WWW Authorization Gateway 0.1 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the "user" parameter...
CVE-1999-1153: Undefined Security Weakness
HAMcards Postcard CGI script 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient email address...
CVE-1999-1180: Undefined Security Weakness
O'Reilly WebSite 1.1e and Website Pro 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an argument to 1 args.cmd or 2 args.bat...
CVE-1999-1278: Undefined Security Weakness
nlog CGI scripts do not properly filter shell metacharacters from the IP address argument, which could allow remote attackers to execute certain commands via 1 nlog-smb.pl or 2 rpc-nlog.pl...
CVE-1999-1220: Undefined Security Weakness
Majordomo 1.94.3 and earlier allows remote attackers to execute arbitrary commands when the advertise or noadvertise directive is used in a configuration file, via shell metacharacters in the Reply-To header...
CVE-1999-1063: Undefined Security Weakness
CDomain whoisraw.cgi whois CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the fqdn parameter...
CVE-1999-1479: Undefined Security Weakness
The textcounter.pl by Matt Wright allows remote attackers to execute arbitrary commands via shell metacharacters...
CVE-1999-1154: Undefined Security Weakness
LakeWeb Filemail CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient email address...
CVE-2001-0956
speechd 0.54 and earlier, with the Festival or rsynth speech synthesis package, allows attackers to execute arbitrary commands via shell metacharacters...
CVE-2001-0997
Textor Webmasters Ltd listrec.pl CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the TEMPLATE parameter...
CVE-2001-0985
shop.pl in Hassan Consulting Shopping Cart 1.23 allows remote attackers to execute arbitrary commands via shell metacharacters in the "page" parameter...
CVE-2001-0552: Undefined Security Weakness
ovactiond in HP OpenView Network Node Manager NNM 6.1 and Tivoli Netview 5.x and 6.x allows remote attackers to execute arbitrary commands via shell metacharacters in a certain SNMP trap message...
CVE-2001-0562
a1disp.cgi program in Drummond Miles A1Stats prior to 1.6 allows a remote attacker to execute commands via a specially crafted URL which includes shell metacharacters...
CVE-2001-1114
book.cgi in NetCode NC Book 0.2b allows remote attackers to execute arbitrary commands via shell metacharacters in the "current" parameter...
CVE-2001-0562
a1disp.cgi program in Drummond Miles A1Stats prior to 1.6 allows a remote attacker to execute commands via a specially crafted URL which includes shell metacharacters...
CVE-2001-0562: Undefined Security Weakness
a1disp.cgi program in Drummond Miles A1Stats prior to 1.6 allows a remote attacker to execute commands via a specially crafted URL which includes shell metacharacters...