Debian DSA-868-1 : mozilla-thunderbird - several vulnerabilities

Several security-related problems have been discovered in Mozilla and derived programs. Some of the following problems don't exactly apply to Mozilla Thunderbird, even though the code is present. In order to keep the codebase in sync with upstream it has been altered nevertheless. The Common...

CVE-2005-3277

The LPD service in HP-UX 10.20 11.11 11i and earlier allows remote attackers to execute arbitrary code via shell metacharacters "" or single backquote in a request that is not properly handled when an error occurs, as demonstrated by killing the connection, a different vulnerability than...

CVE-2005-3277

CVE-2005-3277 documents a remote command-execution vulnerability in HP-UX LPD where shell metacharacters in a crafted request trigger code execution, affecting HP-UX 10.20 and 11.11 (11i) and earlier. The issue is tied to error-path handling and is explicitly noted as distinct from CVE-2002-1473....

CVE-2005-2925

runpriv in SGI IRIX allows local users to bypass intended restrictions and execute arbitrary commands via shell metacharacters in a command line for a privileged binary in /usr/sysadm/privbin...

CVE-2005-2925

runpriv in SGI IRIX allows local users to bypass intended restrictions and execute arbitrary commands via shell metacharacters in a command line for a privileged binary in /usr/sysadm/privbin...

security flaw

Firefox 1.0.6 and Mozilla 1.7.10 allows attackers to execute arbitrary commands via shell metacharacters in a URL that is provided to the browser on the command line, which is sent unfiltered to bash...

CVE-2005-3095

Avi Alkalay notify program, dated 19 Aug 2001, allows remote attackers to execute arbitrary commands via shell metacharacters in the from parameter...

CVE-2005-3096

Avi Alkalay nslookup.cgi program, dated 16 June 2002, allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter...

CVE-2005-3095

CVE-2005-3095 concerns the Avi Alkalay notify program (dated 19 Aug 2001). The available documents indicate that remote attackers could execute arbitrary commands by injecting shell metacharacters into the from parameter. CVSS metrics (NVD) specify a Network attack vector with Low complexity, no ...

CVE-2005-3096

Avi Alkalay nslookup.cgi program, dated 16 June 2002, allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter...

CVE-2005-3096

CVE-2005-3096 concerns Avi Alkalay’s nslookup.cgi CGI script. The vulnerability description states that remote attackers can execute arbitrary commands by supplying shell metacharacters in the query parameter, enabling command execution via a CGI script on the server. Metrics indicate a network-e...

CVE-2005-3095

Avi Alkalay notify program, dated 19 Aug 2001, allows remote attackers to execute arbitrary commands via shell metacharacters in the from parameter...

CVE-2005-3081

CVE-2005-3081 - wzdftpd allows remote authenticated users to execute arbitrary shell commands via shell metacharacters in the SITE command due to missing input sanitising in wzdftpd. Public advisories note this as a remote command execution vulnerability. Debian/DSA-1006-1 fixes the issue in the ...

CVE-2005-3081

wzdftpd 0.5.4 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the SITE command...

security flaw

Firefox 1.0.6 and Mozilla 1.7.10 allows attackers to execute arbitrary commands via shell metacharacters in a URL that is provided to the browser on the command line, which is sent unfiltered to bash...

CVE-2005-2877

The history revision control function in TWiki 02-Sep-2004 and earlier allows remote attackers to execute arbitrary code via shell metacharacters, as demonstrated via the rev parameter to TWikiUsers...

CVE-2005-2877

The history revision control function in TWiki 02-Sep-2004 and earlier allows remote attackers to execute arbitrary code via shell metacharacters, as demonstrated via the rev parameter to TWikiUsers...

CVE-2005-2877

The history revision control function in TWiki 02-Sep-2004 and earlier allows remote attackers to execute arbitrary code via shell metacharacters, as demonstrated via the rev parameter to TWikiUsers...

CVE-2005-2877

CVE-2005-2877 affects TWiki’s revision control function. If the rev parameter in TWikiUsers is not sanitized, remote attackers can inject shell metacharacters to execute arbitrary commands on the server. Public details describe the flaw in TWiki prior to 02-Sep-2004 and indicate the issue stems f...

CVE-2005-2847

Barracuda Spam Firewall (IMG.PL) contains a remote command execution vulnerability in img.pl that allows an attacker to execute arbitrary shell commands via the f parameter. Affected firmware versions include 3.1.16 and 3.1.17; exploits exist in public advisories and Metasploit modules reference ...