CVE-2002-1959

Nagios 1.0b1 through 1.0b3 allows remote attackers to execute arbitrary commands via shell metacharacters in plugin output...

CVE-2002-1874

astrocam.cgi in AstroCam 0.9-1-1 through 1.4.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request. NOTE: earlier disclosures stated that the affected versions were 1.7.1 through 2.1.2, but the vendor explicitly stated that these were incorrect...

CVE-2002-1842

Perlbot 1.0 beta allows remote attackers to execute arbitrary commands via shell metacharacters in 1 a word that is being spell checked or 2 an e-mail address...

CVE-2002-1843

Perlbot 1.9.2 is affected. The vulnerability allows remote attackers to execute arbitrary commands by injecting shell metacharacters through (1) the $text variable in SpelCheck.pm or (2) the $filename variable in HTMLPlog.pm. This is a remote, unauthenticated code execution issue with a network a...

CVE-2002-1842

CVE-2002-1842 affects Perlbot 1.0 beta. A remote attacker can execute arbitrary commands via shell metacharacters in (1) a word being spell checked or (2) an e‑mail address. The vulnerability impact and exploit details are described in the connected records; no fix or remediation is provided in t...

CVE-2002-1971

The ping utility in networkingutils.php in Sourcecraft NetworkingUtils 1.0 allows remote attackers to read arbitrary files via shell metacharacters in the Domain name or IP address argument...

CVE-2001-1502

webcart.cgi in Mountain Network Systems WebCart 8.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the NEXTPAGE parameter...

CVE-2005-1949

The epingvalidaddr function in functions.php for the ePing plugin for e107 portal allows remote attackers to execute arbitrary commands via shell metacharacters after a valid argument to the epinghost parameter...

CVE-2005-1960

The CVE-2005-1960 entry relates to the getemails function in C.J. Steele Tattle, where remote attackers can run arbitrary commands by injecting shell metacharacters into log entries (demonstrated via an FTP username). This is a shell-command injection affecting the vulnerable component and is exp...

CVE-2005-1950

hints.pl in Webhints 1.03 allows remote attackers to execute arbitrary commands via shell metacharacters in the argument...

CVE-2005-1966

The eTracevalidaddr function in eTrace plugin for e107 portal allows remote attackers to execute arbitrary commands via shell metacharacters after a valid argument to the etracehost parameter...

CVE-2005-1960

The getemails function in C.J. Steele Tattle allows remote attackers to execute arbitrary commands via shell metacharacters in certain log entries, as demonstrated using shell metacharacters in an FTP username...

CVE-2005-1966

The CVE-2005-1966 issue affects the e107 content portal via the eTrace plugin: the eTrace_validaddr function allows remote attackers to run arbitrary commands by injecting shell metacharacters after a valid etrace_host argument. The NASL plug-in also describes a DOTRACE path where etrace_cmd/etra...

PT-2005-2900 · E107 · Eping Plugin

Name of the Vulnerable Software and Affected Versions: ePing plugin for e107 portal affected versions not specified Description: The issue allows remote attackers to execute arbitrary commands via shell metacharacters after a valid argument to the eping host parameter in the eping validaddr...

CVE-2005-1966

The eTracevalidaddr function in eTrace plugin for e107 portal allows remote attackers to execute arbitrary commands via shell metacharacters after a valid argument to the etracehost parameter...

CVE-2005-1960

The getemails function in C.J. Steele Tattle allows remote attackers to execute arbitrary commands via shell metacharacters in certain log entries, as demonstrated using shell metacharacters in an FTP username...

CVE-2005-1795

The filecopy function in misc.c in Clam AntiVirus ClamAV before 0.85, on Mac OS, allows remote attackers to execute arbitrary code via a virus in a filename that contains shell metacharacters, which are not properly handled when HFS permissions prevent the file from being deleted and ditto is...

CVE-2005-1795

The vulnerability affects Clam AntiVirus (ClamAV) prior to 0.85 on macOS, where the filecopy function in misc.c can be exploited by a virus name containing shell metacharacters. This occurs when HFS permissions prevent deletion and ditto is invoked, allowing remote code execution. The reported im...

CVE-2005-1795

The filecopy function in misc.c in Clam AntiVirus ClamAV before 0.85, on Mac OS, allows remote attackers to execute arbitrary code via a virus in a filename that contains shell metacharacters, which are not properly handled when HFS permissions prevent the file from being deleted and ditto is...

Fedora Core 2 : xloadimage-4.1-34.FC2 (2005-236)

This update fixes CVE-2005-0638, a problem in the parsing of shell metacharacters in filenames. It also fixes bugs in handling of malformed TIFF and PBM/PNM/PPM issues. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...