security flaw

Firefox 1.0.6 and Mozilla 1.7.10 allows attackers to execute arbitrary commands via shell metacharacters in a URL that is provided to the browser on the command line, which is sent unfiltered to bash...

CVE-2005-3095

Avi Alkalay notify program, dated 19 Aug 2001, allows remote attackers to execute arbitrary commands via shell metacharacters in the from parameter...

CVE-2005-3096

Avi Alkalay nslookup.cgi program, dated 16 June 2002, allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter...

CVE-2005-3096

CVE-2005-3096 concerns Avi Alkalay’s nslookup.cgi CGI script. The vulnerability description states that remote attackers can execute arbitrary commands by supplying shell metacharacters in the query parameter, enabling command execution via a CGI script on the server. Metrics indicate a network-e...

CVE-2005-3096

Avi Alkalay nslookup.cgi program, dated 16 June 2002, allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter...

CVE-2005-3095

Avi Alkalay notify program, dated 19 Aug 2001, allows remote attackers to execute arbitrary commands via shell metacharacters in the from parameter...

CVE-2005-3095

CVE-2005-3095 concerns the Avi Alkalay notify program (dated 19 Aug 2001). The available documents indicate that remote attackers could execute arbitrary commands by injecting shell metacharacters into the from parameter. CVSS metrics (NVD) specify a Network attack vector with Low complexity, no ...

CVE-2005-3081

wzdftpd 0.5.4 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the SITE command...

CVE-2005-3081

CVE-2005-3081 - wzdftpd allows remote authenticated users to execute arbitrary shell commands via shell metacharacters in the SITE command due to missing input sanitising in wzdftpd. Public advisories note this as a remote command execution vulnerability. Debian/DSA-1006-1 fixes the issue in the ...

security flaw

Firefox 1.0.6 and Mozilla 1.7.10 allows attackers to execute arbitrary commands via shell metacharacters in a URL that is provided to the browser on the command line, which is sent unfiltered to bash...

CVE-2005-2877

The history revision control function in TWiki 02-Sep-2004 and earlier allows remote attackers to execute arbitrary code via shell metacharacters, as demonstrated via the rev parameter to TWikiUsers...

CVE-2005-2877

The history revision control function in TWiki 02-Sep-2004 and earlier allows remote attackers to execute arbitrary code via shell metacharacters, as demonstrated via the rev parameter to TWikiUsers...

CVE-2005-2877

CVE-2005-2877 affects TWiki’s revision control function. If the rev parameter in TWikiUsers is not sanitized, remote attackers can inject shell metacharacters to execute arbitrary commands on the server. Public details describe the flaw in TWiki prior to 02-Sep-2004 and indicate the issue stems f...

CVE-2005-2877

The history revision control function in TWiki 02-Sep-2004 and earlier allows remote attackers to execute arbitrary code via shell metacharacters, as demonstrated via the rev parameter to TWikiUsers...

TWiki History Function Arbitrary Command Execution

This module exploits a vulnerability in the history component of TWiki. By passing a 'rev' parameter containing shell metacharacters, an attacker can execute arbitrary OS commands. Affected versions: - 20040902 - 20040901 - 20030201 - 20011201 - 20001201 Module Options msf use...

CVE-2005-2847

The Barracuda Spam Firewall running firmware versions 3.1.16 and 3.1.17 is vulnerable to a remote command execution flaw in the img.pl component. An attacker can execute arbitrary commands by providing shell metacharacters in the f parameter. Versions prior to 3.1.18 are confirmed as vulnerable. ...

CVE-2005-2847

img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to execute arbitrary commands via shell metacharacters in the f parameter...

CVE-2005-2777

CVE-2005-2777 affects Looking Glass (Looking Glass 20040427). The issue is a remote command execution vulnerability: an attacker can craft shell metacharacters in the DNS lookup query field to run arbitrary commands, with the attacker able to execute code on the web server (per the description’s ...

CVE-2005-2777

Looking Glass 20040427 allows remote attackers to execute arbitrary commands via shell metacharacters in the DNS lookup query field...

CVE-2005-2773

HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 node parameter to connectedNodes.ovpl, 2 cdpView.ovpl, 3 freeIPaddrs.ovpl, and 4 ecscmg.ovpl...