CVE-2007-2355: Undefined Security Weakness

The geturl function in DODSDispatch.pm for the CGIserver in OPeNDAP 3 allows remote attackers to execute arbitrary commands via shell metacharacters in a URL...

CVE-2007-2055: Undefined Security Weakness

AFFLIB 2.2.8 and earlier allows attackers to execute arbitrary commands via shell metacharacters involving 1 certain command line parameters in tools/afconvert.cpp and 2 arguments to the getparameter function in aimage/ident.cpp. NOTE: it is unknown if the getparameter vector 2 is ever called...

CVE-2007-2348

mirror --script in lftp before 3.5.9 does not properly quote shell metacharacters, which might allow remote user-assisted attackers to execute shell commands via a malicious script. NOTE: it is not clear whether this issue crosses security boundaries, since the script already supports commands su...

DEBIAN-CVE-2007-2348

mirror --script in lftp before 3.5.9 does not properly quote shell metacharacters, which might allow remote user-assisted attackers to execute shell commands via a malicious script. NOTE: it is not clear whether this issue crosses security boundaries, since the script already supports commands su...

CVE-2007-2348

mirror --script in lftp before 3.5.9 does not properly quote shell metacharacters, which might allow remote user-assisted attackers to execute shell commands via a malicious script. NOTE: it is not clear whether this issue crosses security boundaries, since the script already supports commands su...

CVE-2007-2348

mirror --script in lftp before 3.5.9 does not properly quote shell metacharacters, which might allow remote user-assisted attackers to execute shell commands via a malicious script. NOTE: it is not clear whether this issue crosses security boundaries, since the script already supports commands su...

CVE-2007-2348

CVE-2007-2348 affects lftp versions prior to 3.5.9, where the command prefix mirror --script does not properly quote shell metacharacters. This can allow a remote attacker controlling a malicious FTP server to run arbitrary commands via a crafted script. Several connected advisories note that upd...

CVE-2007-2348

mirror --script in lftp before 3.5.9 does not properly quote shell metacharacters, which might allow remote user-assisted attackers to execute shell commands via a malicious script. NOTE: it is not clear whether this issue crosses security boundaries, since the script already supports commands su...

PT-2007-3681 · Lftp +1 · Lftp +1

Name of the Vulnerable Software and Affected Versions: lftp versions prior to 3.5.9 Description: The issue is related to the mirror --script feature in lftp, which does not properly quote shell metacharacters. This might allow remote user-assisted attackers to execute shell commands via a malicio...

Command injection

The command line administration interface in Data Domain OS before 4.0.3.6 allows remote authenticated users to execute arbitrary commands via shell metacharacters in certain arguments to various commands, as demonstrated by the interface argument to the 1 ifconfig and 2 ping commands...

CVE-2007-1836

Affected product/summary: Data Domain OS

CVE-2007-1836

The command line administration interface in Data Domain OS before 4.0.3.6 allows remote authenticated users to execute arbitrary commands via shell metacharacters in certain arguments to various commands, as demonstrated by the interface argument to the 1 ifconfig and 2 ping commands...

CVE-2007-1836: Undefined Security Weakness

The command line administration interface in Data Domain OS before 4.0.3.6 allows remote authenticated users to execute arbitrary commands via shell metacharacters in certain arguments to various commands, as demonstrated by the interface argument to the 1 ifconfig and 2 ping commands...

security flaw

OpenOffice.org OOo Office Suite allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a prepared link in a crafted document...

security flaw

OpenOffice.org OOo Office Suite allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a prepared link in a crafted document...

Code injection

OpenOffice.org OOo Office Suite allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a prepared link in a crafted document...

CVE-2007-0239

OpenOffice.org OOo Office Suite allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a prepared link in a crafted document...

CVE-2007-0239

OpenOffice.org OOo Office Suite allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a prepared link in a crafted document...

CVE-2007-0239: Undefined Security Weakness

OpenOffice.org OOo Office Suite allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a prepared link in a crafted document...

Command injection

Unspecified maintenance web pages in Avaya S87XX, S8500, and S8300 before CM 3.1.3, and Avaya SES allow remote authenticated users to execute arbitrary commands via shell metacharacters in unspecified vectors aka "shell command injection"...