CVE-2000-0370

The debug option in Caldera Linux smail allows remote attackers to execute commands via shell metacharacters in the -D option for the rmail command...

CVE-2000-0432

The CVE-2000-0432 issue affects the calendar CGI scripts by Matt Kruse, specifically calendar_admin.pl, which are susceptible to remote command execution via shell metacharacters. The Nessus entry confirms the vulnerable component as the calendar_admin.pl CGI installed in /cgi-bin, with a well-kn...

CVE-2000-0432

The calender.pl and the calendaradmin.pl calendar scripts by Matt Kruse allow remote attackers to execute arbitrary commands via shell metacharacters...

CVE-2000-0635

The viewpage.html sample page in the MiniVend shopping cart program allows remote attackers to execute arbitrary commands via shell metacharacters...

CVE-2000-0466

AIX cdmount allows local users to gain root privileges via shell metacharacters...

CVE-1999-0210

Automount daemon automountd allows local or remote users to gain privileges via shell metacharacters...

CVE-1999-0210

The CVE-1999-0210 issue affects the Solaris automountd RPC service. It allows local or remote users to gain privileges by supplying shell metacharacters in RPC requests to automountd. The vulnerability’s root cause relates to how automountd handles input in its RPC endpoints, enabling privilege e...

CVE-2000-0424

The CGI counter 4.0.7 by George Burgyan allows remote attackers to execute arbitrary commands via shell metacharacters...

CVE-2000-0421

The processbug.cgi script in Bugzilla allows remote attackers to execute arbitrary commands via shell metacharacters...

CVE-2000-0010

The CVE-2000-0010 entry concerns WebWho+ whois.cgi, a CGI script where the TLD parameter can be manipulated to execute arbitrary shell commands on the remote host. Multiple sources (NVD/NASM-like entries and PT-PTSecurity) confirm remote command execution as the impact, due to shell metacharacter...

CVE-2000-0010

WebWho+ whois.cgi program allows remote attackers to execute commands via shell metacharacters in the TLD parameter...

CVE-2000-0242

CVE-2000-0242 affects WindMail where the CGI component (windmail.exe) is vulnerable to remote command execution via shell metacharacters. The underlying issue allows an attacker over the network to read arbitrary files or execute arbitrary commands on the remote server through crafted input to th...

CVE-2000-0287

The BizDB CGI script bizdb-search.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the dbname parameter...

CVE-2000-0242

WindMail allows remote attackers to read arbitrary files or execute commands via shell metacharacters...

CVE-2000-0207

SGI InfoSearch CGI program infosrch.cgi allows remote attackers to execute commands via shell metacharacters...

CVE-2000-0207

CVE-2000-0207 affects SGI InfoSearch Infosrch.cgi where the fname parameter fails to sanitize input, enabling remote arbitrary command execution via shell metacharacters. This is a remote web-server issue likely yielding command execution under the web server user. Nessus notes describe the flaw ...

fcheck.txt

The short explanation: fcheck is a file integrity checker written in perl. It can send warnings to syslog via an external program such as logger1. Because it calls system with a scalar argument, a malicious user can cause it to execute programs by creating files with shell metacharacters in their...

CVE-2000-0296

fcheck allows local users to gain privileges by embedding shell metacharacters into file names that are processed by fcheck...

CVE-2000-0242

WindMail allows remote attackers to read arbitrary files or execute commands via shell metacharacters...

CVE-2000-0213

The Sambar server is affected by CVE-2000-0213 due to batch files in the CGI directory (hello.bat and echo.bat) that allow remote attackers to execute commands via shell metacharacters. The Nessus plugin confirms these scripts enable arbitrary code execution with the web server’s privileges, iden...