CVE-2003-0084: Undefined Security Weakness

modauthany package in Red Hat Enterprise Linux 2.1 and other operating systems does not properly escape arguments when calling other programs, which allows attackers to execute arbitrary commands via shell metacharacters...

CVE-2003-0205

CVE-2003-0205 affects the gkrellm-newsticker plugin for gkrellm: before 0.3-3.1, it allows remote attackers to execute arbitrary commands via shell metacharacters in the ticker URI title. The Debian advisory DSA-294-1 fixes this by upgrading to 0.3-3.1. The associated CAN-2003-0205/0206 issues de...

CVE-2003-0205

gkrellm-newsticker gkrellm plugin before 0.3-3.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the ticker title of a URI...

CVE-2003-0205: Undefined Security Weakness

gkrellm-newsticker gkrellm plugin before 0.3-3.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the ticker title of a URI...

DEBIAN-CVE-2002-1477

graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via shell metacharacters in the title during edit mode...

CVE-2002-1477

graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via shell metacharacters in the title during edit mode...

CVE-2002-0094

configconverters.py in BSCW Basic Support for Cooperative Work 3.x and versions before 4.06 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name during filename conversion...

CVE-2002-0488

Linux Directory Penguin traceroute.pl CGI script 1.0 allows remote attackers to execute arbitrary code via shell metacharacters in the host parameter...

CVE-2002-0382

Summary: CVE-2002-0382 affects the XChat IRC client. The issue arises when handling a /dns query, where the DNS reverse lookup can contain shell metacharacters, allowing arbitrary commands to be executed with the user’s privileges. This is caused by XChat passing the resolver/hostname to a shell ...

CVE-2002-0989

CVE-2002-0989 affects Gaim prior to 0.59.1. The vulnerability lies in the URL handler of the manual browser option, where a crafted link containing shell metacharacters can lead to remote command execution. References from Red Hat, Debian, Mandrake, and Red Hat advisories indicate updating to 0.5...

CVE-2002-0904

Removed by vendor...

CVE-2002-0904

SayText function in Kismet 2.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters backtick or pipe in the essid argument...

CVE-2002-0014

CVE-2002-0014 affects Pine up to version 4.43 and earlier. The vulnerability lies in URL-handling code that allows remote attackers to execute arbitrary commands when a URL enclosed in single quotes and containing shell metacharacters is processed. Impact is remote code execution with network acc...

CVE-2002-0904: Undefined Security Weakness

SayText function in Kismet 2.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters backtick or pipe in the essid argument...

CVE-2002-0094: Undefined Security Weakness

configconverters.py in BSCW Basic Support for Cooperative Work 3.x and versions before 4.06 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name during filename conversion...

CVE-2002-0382: Undefined Security Weakness

XChat IRC client allows remote attackers to execute arbitrary commands via a /dns command on a host whose DNS reverse lookup contains shell metacharacters...

CVE-2002-0532: Undefined Security Weakness

EMU Webmail allows local users to execute arbitrary programs via a .. dot dot in the HTTP Host header that points to a Trojan horse configuration file that contains a pageroot specifier that contains shell metacharacters...

CVE-2002-0061: Improper Neutralization of Special Elements used in an OS Command

Apache for Win32 before 1.3.24, and 2.0.x before 2.0.34-beta, allows remote attackers to execute arbitrary commands via shell metacharacters a | pipe character provided as arguments to batch .bat or .cmd scripts, which are sent unfiltered to the shell interpreter, typically cmd.exe...

CVE-2002-0488: Undefined Security Weakness

Linux Directory Penguin traceroute.pl CGI script 1.0 allows remote attackers to execute arbitrary code via shell metacharacters in the host parameter...

CVE-2002-0437: Undefined Security Weakness

Smsd in SMS Server Tools SMStools before 1.4.8 allows remote attackers to execute arbitrary commands via shell metacharacters backquotes in message text, as described with the term "string format vulnerability" by some sources...