CVE-1999-0984

Matt's Whois program whois.cgi is vulnerable to remote command execution via shell metacharacters in the domain field. The root cause is unsanitized input in the domain entry. Affected: Matt's Whois program whois.cgi (versions not specified). Impact: arbitrary commands executed on the server. Exp...

CVE-1999-0941

Mutt mail client allows a remote attacker to execute commands via shell metacharacters...

CVE-1999-0983

The CVE-1999-0983 entry concerns the Whois Internic Lookup program’s whois.cgi, where the domain field accepts input that can be manipulated with shell metacharacters to execute commands remotely. Public sources in the connected documents confirm the vulnerability involves remote command executio...

CVE-1999-0985

CC Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry...

CVE-2000-0035

resend command in Majordomo allows local users to gain privileges via shell metacharacters...

CVE-2000-0128

The Finger Server 0.82 allows remote attackers to execute commands via shell metacharacters...

CVE-1999-0983

Whois Internic Lookup program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry...

CVE-1999-0984

Matt's Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry...

CVE-2000-0059

CVE-2000-0059 affects PHP3 when safe_mode is enabled. The vulnerability arises because shell metacharacters are not properly filtered from commands executed via popen , potentially allowing remote attackers to execute arbitrary commands. The provided documents describe the issue but do not specif...

CVE-2000-0035

CVE-2000-0035 : The vulnerability involves Majordomo’s resend command that allows local users to gain privileges via shell metacharacters. This is a local-privilege issue with the root cause being unsafely handled shell metacharacters in the resend logic. The NVD entry lists a CVSSv2 base score o...

CVE-1999-0985

CVE-1999-0985 affects the CC Whois program. The vulnerability arises in the whois.cgi entry for a domain, where remote attackers can cause command execution by injecting shell metacharacters. The available documents describe the issue but do not specify affected versions or provide an official fi...

CVE-1999-0936

CVE-1999-0936 affects BNBSurvey’s Survey.cgi (Big Nose Bird) remote CGI script. The vulnerability arises from insufficient input validation, allowing shell metacharacters to be injected in user input, enabling remote command execution with the web server’s privileges. Severity is high (CVSSv2 bas...

CVE-1999-0934

classifieds.cgi allows remote attackers to read arbitrary files via shell metacharacters...

CVE-1999-0978

CVE-1999-0978 concerns ht://Dig htsearch CGI in the htdig package. Connected Nessus entry describes an information-disclosure vulnerability where the htsearch CGI allows reading arbitrary files on the target host. The affected component is the htsearch CGI (part of ht/dig), prior to version 3.1.5...

CVE-2000-0059

PHP3 with safemode enabled does not properly filter shell metacharacters from commands that are executed by popen, which could allow remote attackers to execute commands...

CVE-1999-0868

ucbmail allows remote attackers to execute commands via shell metacharacters that are passed to it from INN...

CVE-1999-0947

AN-HTTPd server is affected by a remote command execution risk due to default CGI scripts test.bat, input.bat, input2.bat, and ssi/envout.bat that allow shell metacharacters. Exploitation would enable an attacker to run arbitrary commands on the remote host. The vulnerability details are drawn fr...

CVE-1999-0934

CVE-1999-0934 affects the classifieds.cgi CGI script. The vulnerability arises from insufficient input filtering, allowing remote attackers to read arbitrary files on the Web server by injecting shell metacharacters, effectively executing commands via the httpd process. Impact note: read-access t...

CVE-1999-0938

CVE-1999-0938 involves the MBone SDR Package, which is vulnerable to remote command execution via shell metacharacters in SIP messages. The concrete details indicate the affected software (MBone SDR Package) and the vulnerable component (SIP message handling that allows shell metacharacter input)...

CVE-1999-1333

automatic download option in ncftp 2.4.2 FTP client in Red Hat Linux 5.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the names of files that are to be downloaded...