FreeBSD Ports: enscript-a4, enscript-letter, enscript-letterdj

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: acroread, acroread4, acroread5

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: xli

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2008-3459

Unspecified vulnerability in OpenVPN 2.1-beta14 through 2.1-rc8, when running on non-Windows systems, allows remote servers to execute arbitrary commands via crafted 1 lladdr and 2 iproute configuration directives, probably related to shell metacharacters...

CVE-2008-3459

Unspecified vulnerability in OpenVPN 2.1-beta14 through 2.1-rc8, when running on non-Windows systems, allows remote servers to execute arbitrary commands via crafted 1 lladdr and 2 iproute configuration directives, probably related to shell metacharacters...

CVE-2008-3459

Unspecified vulnerability in OpenVPN 2.1-beta14 through 2.1-rc8, when running on non-Windows systems, allows remote servers to execute arbitrary commands via crafted 1 lladdr and 2 iproute configuration directives, probably related to shell metacharacters...

vim6 -- heap-based overflow while parsing shell metacharacters

Description for CVE-2008-3432 says: Heap-based buffer overflow in the mchexpandwildcards function in osunix.c in Vim 6.2 and 6.3 allows user-assisted attackers to execute arbitrary code via shell metacharacters in filenames, as demonstrated by the netrw.v3 test case...

Code injection

The expandtemplate function in afuse.c in afuse 0.2 allows local users to gain privileges via shell metacharacters in a pathname...

CVE-2008-2232

The expandtemplate function in afuse.c in afuse 0.2 allows local users to gain privileges via shell metacharacters in a pathname...

CVE-2008-2232

The expandtemplate function in afuse.c in afuse 0.2 allows local users to gain privileges via shell metacharacters in a pathname...

DEBIAN-CVE-2008-2232

The expandtemplate function in afuse.c in afuse 0.2 allows local users to gain privileges via shell metacharacters in a pathname...

CVE-2008-2232

The expandtemplate function in afuse.c in afuse 0.2 allows local users to gain privileges via shell metacharacters in a pathname...

CVE-2008-2232

The expandtemplate function in afuse.c in afuse 0.2 allows local users to gain privileges via shell metacharacters in a pathname...

CVE-2008-2575

cbrPager before 0.9.17 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a 1 ZIP aka .cbz or 2 RAR aka .cbr archive filename...

PT-2008-4030 · Cbrpager · Cbrpager

Name of the Vulnerable Software and Affected Versions: cbrPager versions prior to 0.9.17 Description: The issue allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a ZIP aka .cbz or RAR aka .cbr archive filename. Recommendations: For versions prior to...

Code injection

Sun Java Active Server Pages ASP Server before 4.0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in HTTP requests to unspecified ASP applications...

CVE-2008-2405

CVE-2008-2405 affects Sun Java System Active Server Pages (ASP) Server prior to 4.0.3. The issue is that several of the administration ASP applications fail to filter or escape user input before using it to generate commands, allowing remote attackers to inject shell commands via HTTP requests to...

CVE-2008-2478

CVE-2008-2478 affects cPanel under scripts/wwwacct (versions 11.18.6 STABLE and earlier, and 11.23.1 CURRENT and earlier). The issue allows remote authenticated users with reseller privileges to execute arbitrary code via shell metacharacters in the Email address field, enabling code execution th...

PT-2008-3935 · Cpanel · Cpanel

Name of the Vulnerable Software and Affected Versions: cPanel versions 11.18.6 and earlier, 11.23.1 and earlier Description: The issue allows remote authenticated users with reseller privileges to execute arbitrary code via shell metacharacters in the Email address field. The vendor disputes this...

LHA Arbitrary Command Execution Vulnerability with Shell Metacharacter in Directory Name

Overview LHA is vulnerable to arbitrary command execution due to improper handling of directory names cantaining shell metacharacters. Impact An remote attacker could execute arbitrary command. Solution Please refer to the 'Vendor Information' section for official remediation and take appropriate...