4031 matches found
CVE-2000-0727
xpdf PDF viewer client earlier than 0.91 does not properly launch a web browser for embedded URL's, which allows an attacker to execute arbitrary commands via a URL that contains shell metacharacters...
CVE-2000-0787
IRC Xchat client versions 1.4.2 and earlier allows remote attackers to execute arbitrary commands by encoding shell metacharacters into a URL which XChat uses to launch a web browser...
CVE-2000-0787
The CVE covers the IRC XChat client (versions ≤ 1.4.2). It describes a remote command execution where shell metacharacters embedded in a URL, used by XChat to launch a browser, can be exploited. The NVD notes a high impact (CVSS v2 base score 7.5) with network access and no authentication require...
CVE-2000-0322
The CVE-2000-0322 vulnerability concerns the Red Hat Piranha Virtual Server Package, where the passwd.php3 CGI script allows local users to execute arbitrary commands via shell metacharacters. Connected documents confirm concrete details: an authenticated attacker could exploit a metacharacter in...
CVE-2000-0690
Auction Weaver CGI script 1.02 and earlier is affected by a remote command execution vulnerability: an attacker can inject shell metacharacters into the fromfile parameter to execute arbitrary commands. According to the PacketStorm entry, a patch exists (Auction Weaver 1.05). The NVD entry confir...
[SECURITY] New version of xpdf released
Package : xpdf Problem type : local exploit Debian-specific: no xpdf as distributed in Debian GNU/Linux 2.2 suffered from two problems: 1. creation of temporary files was not done safely which made xpdf vulnerable to a symlink attack. 2. when handling URLs in documents no checking was done for...
[SECURITY] New version of xpdf released
------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman September 10, 2000 - ------------------------------------------------------------------------ Package : xpdf Problem type : local...
X-Chat 1.21.31.41.5 - Command Execution via URLs
X-Chat 1.21.31.41.5 - Command Execution via URLs source: https://www.securityfocus.com/bid/1601/info A vulnerability exists in versions 1.4.2 and earlier of the X-Chat IRC client. By supplying commands enclosed in backticks in URL's sent to X-Chat, it is possible to execute arbitrary commands...
X-Chat 1.2/1.3/1.4/1.5 - Command Execution via URLs
source: https://www.securityfocus.com/bid/1601/info A vulnerability exists in versions 1.4.2 and earlier of the X-Chat IRC client. By supplying commands enclosed in backticks in URL's sent to X-Chat, it is possible to execute arbitrary commands should the X-Chat user decide to view the link by...
CVE-2000-0352
Technical details about CVE-2000-0352 are not provided in the connected documents. The initial entry lists the Pine vulnerability but no additional specifics. Monitor for updates.
CVE-2000-0370
CVE-2000-0370 affects Caldera Linux smail. The debug option allows remote command execution via shell metacharacters in the -D option for rmail, enabling full compromise of confidentiality, integrity, and availability (CVSSv2 base score 10.0). Exploitation details are not provided in the availabl...
CVE-2000-0432
The calender.pl and the calendaradmin.pl calendar scripts by Matt Kruse allow remote attackers to execute arbitrary commands via shell metacharacters...
CVE-2000-0370
The debug option in Caldera Linux smail allows remote attackers to execute commands via shell metacharacters in the -D option for the rmail command...
CVE-2000-0527
The CVE-2000-0527 entry concerns the MailStudio 2000 (and earlier) product where the CGI program userreg.cgi is vulnerable. An attacker could remotely execute arbitrary commands by injecting shell metacharacters, enabling full compromise of affected systems. The provided sources consistently desc...
CVE-2000-0432
The CVE-2000-0432 issue affects the calendar CGI scripts by Matt Kruse, specifically calendar_admin.pl, which are susceptible to remote command execution via shell metacharacters. The Nessus entry confirms the vulnerable component as the calendar_admin.pl CGI installed in /cgi-bin, with a well-kn...
CVE-2000-0635
The viewpage.html sample page in the MiniVend shopping cart program allows remote attackers to execute arbitrary commands via shell metacharacters...
CVE-2000-0466
AIX cdmount allows local users to gain root privileges via shell metacharacters...
CVE-1999-0210
Automount daemon automountd allows local or remote users to gain privileges via shell metacharacters...
CVE-1999-0210
The CVE-1999-0210 issue affects the Solaris automountd RPC service. It allows local or remote users to gain privileges by supplying shell metacharacters in RPC requests to automountd. The vulnerability’s root cause relates to how automountd handles input in its RPC endpoints, enabling privilege e...