CVE-1999-0934

CVE-1999-0934 affects the classifieds.cgi CGI script. The vulnerability arises from insufficient input filtering, allowing remote attackers to read arbitrary files on the Web server by injecting shell metacharacters, effectively executing commands via the httpd process. Impact note: read-access t...

CVE-1999-1512

The AMaViS virus scanner 0.2.0-pre4 and earlier allows remote attackers to execute arbitrary commands as root via an infected mail message with shell metacharacters in the reply-to field...

CVE-1999-1333

automatic download option in ncftp 2.4.2 FTP client in Red Hat Linux 5.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the names of files that are to be downloaded...

CVE-2000-0013

IRIX soundplayer program allows local users to gain privileges by including shell metacharacters in a .wav file, which is executed via the midikeys program...

CVE-2000-0010

WebWho+ whois.cgi program allows remote attackers to execute commands via shell metacharacters in the TLD parameter...

CVE-1999-0934

classifieds.cgi allows remote attackers to read arbitrary files via shell metacharacters...

CVE-1999-0978

htdig allows remote attackers to execute commands via filenames with shell metacharacters...

CVE-1999-0985

CC Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry...

CVE-1999-0983

Whois Internic Lookup program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry...

CVE-1999-0984

Matt's Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry...

PT-1999-1505 · Cc · Cc Whois

Name of the Vulnerable Software and Affected Versions: CC Whois program affected versions not specified Description: The issue allows remote attackers to execute commands via shell metacharacters in the domain entry. This can be done by injecting malicious input into the domain field, potentially...

PT-1999-1504 · Matt · Whois.Cgi

Name of the Vulnerable Software and Affected Versions: Matt's Whois program whois.cgi affected versions not specified Description: The issue allows remote attackers to execute commands via shell metacharacters in the domain entry. Recommendations: At the moment, there is no information about a...

PT-1999-1503 · Internic · Whois Internic Lookup

Name of the Vulnerable Software and Affected Versions: Whois Internic Lookup program affected versions not specified Description: The issue allows remote attackers to execute commands via shell metacharacters in the domain entry. This can be exploited by injecting malicious input into the domain...

CVE-1999-0947

AN-HTTPd provides example CGI scripts test.bat, input.bat, input2.bat, and envout.bat, which allow remote attackers to execute commands via shell metacharacters...

CVE-1999-0097

The AIX FTP client can be forced to execute commands from a malicious server through shell metacharacters e.g. a pipe character...

CVE-1999-0152

The DG/UX finger daemon allows remote command execution through shell metacharacters...

CVE-1999-0067

CVE-1999-0067 affects the phf CGI program that is included with NCSA httpd-derived web servers. The vulnerability allows remote command execution by supplying shell metacharacters in input processed by the phf CGI script, due to inadequate input sanitization. The issue can execute commands with t...

CVE-1999-0279

Excite for Web Servers EWS allows remote command execution via shell metacharacters...

CVE-1999-0260

The jj CGI program allows command execution via shell metacharacters...

CVE-1999-0097

The CVE-1999-0097 entry concerns the AIX FTP client, where a malicious FTP server can force execution of shell commands on the client via metacharacters (for example, a pipe). The issue is documented across multiple sources (NVD, CVE list) and is consistent with historical CERT/Red Hat advisories...