CVE-2006-6330

index.php for TorrentFlux 2.2 allows remote registered users to execute arbitrary commands via shell metacharacters in the kill parameter...

CVE-2006-6330

CVE-2006-6330 affects TorrentFlux 2.2. The vulnerability is in index.php where the kill parameter accepts shell metacharacters, allowing remote registered users to execute arbitrary commands. Root cause: unsafely handling the kill parameter enables command execution via the shell. Impact is descr...

CVE-2006-6244

Coalescent Systems freePBX formerly Asterisk Management Portal before 2.2.0rc1 allows attackers to execute arbitrary commands via shell metacharacters in 1 CALLERIDname or 2 CALLERIDnumber...

CVE-2006-5869

pstotext before 1.9 allows user-assisted attackers to execute arbitrary commands via shell metacharacters in a file name...

CVE-2006-5869

pstotext before 1.9 allows user-assisted attackers to execute arbitrary commands via shell metacharacters in a file name...

CVE-2006-5869

CVE-2006-5869 affects pstotext, a Postscript/PDF text extractor. The root cause is insufficient quoting of file names, enabling user-assisted arbitrary shell command execution via shell metacharacters in a file name. Debian DSA-1220-1 fixes this in pstotext 1.9-1sarge2 (Sarge) and 1.9-4 (Etch/Sid...

CVE-2006-5869

Removed by vendor...

security flaw

Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbitrary code via shell metacharacters in an smb:// URI, as demonstrated by using PUT and GET statements...

CVE-2006-5925

Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbitrary code via shell metacharacters in an smb:// URI, as demonstrated by using PUT and GET statements...

CVE-2006-5925

Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbitrary code via shell metacharacters in an smb:// URI, as demonstrated by using PUT and GET statements...

DEBIAN-CVE-2006-5925

Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbitrary code via shell metacharacters in an smb:// URI, as demonstrated by using PUT and GET statements...

CVE-2006-5925

Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbitrary code via shell metacharacters in an smb:// URI, as demonstrated by using PUT and GET statements...

CVE-2006-5925

Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbitrary code via shell metacharacters in an smb:// URI, as demonstrated by using PUT and GET statements...

CVE-2006-5449

procmail in Ingo H3 before 1.1.2 Horde module allows remote authenticated users to execute arbitrary commands via shell metacharacters in the mailbox destination of a filter rule...

CVE-2006-5449

procmail in Ingo H3 before 1.1.2 Horde module allows remote authenticated users to execute arbitrary commands via shell metacharacters in the mailbox destination of a filter rule...

CVE-2006-5449

CVE-2006-5449 affects Ingo H3 (Horde module) and allows remote authenticated users to execute arbitrary shell commands via metacharacters in the mailbox destination of a filter rule. The issue arises from inadequate escaping in procmail rule generation. Affected software is Ingo H3 up to version ...

GLSA-200610-05 : CAPI4Hylafax fax receiver: Execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200610-05 CAPI4Hylafax fax receiver: Execution of arbitrary code Lionel Elie Mamane discovered an error in c2faxrecv, which doesn't properly sanitize TSI strings when handling incoming calls. Impact : A remote attacker can send nu...

CAPI4Hylafax fax receiver: Execution of arbitrary code

Background CAPI4Hylafax makes it possible to send and receive faxes via CAPI and AVM Fritz!Cards. Description Lionel Elie Mamane discovered an error in c2faxrecv, which doesn't properly sanitize TSI strings when handling incoming calls. Impact A remote attacker can send null \0 and shell...

local to local copy uses shell expansion twice

scp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain shell metacharacters or spaces, which are expanded twice...

CVE-2006-3126

c2faxrecv in capi4hylafax 01.02.03 allows remote attackers to execute arbitrary commands via null \0 and shell metacharacters in the TSI string, as demonstrated by a fax from an anonymous number...