5658 matches found
CVE-2012-4361
CVE-2012-4361 concerns HP SAN/iQ’s Virtual SAN Appliance, where the component at lhn/public/network/ping allows remote authenticated users to execute arbitrary shell commands by injecting metacharacters in the second parameter. The vulnerability affects HP SAN/iQ versions up to and including 9.4/...
CVE-2012-2986
Affected software/variant: HP SAN/iQ Virtual SAN Appliance (9.5 released prior) with the lhn/public/network/ping component. Vulnerability details: Remote authenticated users can execute arbitrary commands via shell metacharacters in specific parameters (the first, third, or fourth parameter as ci...
CVE-2012-4361: Improper Neutralization of Special Elements used in an OS Command
lhn/public/network/ping in HP SAN/iQ before 9.5 on the HP Virtual SAN Appliance allows remote authenticated users to execute arbitrary commands via shell metacharacters in the second parameter...
CVE-2012-2986: Improper Neutralization of Special Elements used in an OS Command
lhn/public/network/ping in HP SAN/iQ 9.5 on the HP Virtual SAN Appliance allows remote authenticated users to execute arbitrary commands via shell metacharacters in the 1 first, 2 third, or 3 fourth parameter. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-4361...
PT-2012-5358
Name of the Vulnerable Software and Affected Versions HP Virtual SAN Appliance version prior to 9.5 Description The issue allows remote authenticated users to execute arbitrary commands via shell metacharacters in the second parameter of the 'lhn/public/network/ping' endpoint. Recommendations For...
PT-2012-4416
Name of the Vulnerable Software and Affected Versions HP SAN/iQ version 9.5 on the HP Virtual SAN Appliance Description The issue allows remote authenticated users to execute arbitrary commands via shell metacharacters in certain parameters. This is due to an incomplete fix for a previous issue...
Code injection
The Amazon Lab126 com.lab126.system sendEvent implementation on the Kindle Touch before 5.1.2 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a string, as demonstrated by using lipc-set-prop to set an LIPC property, a different vulnerability than...
CVE-2012-4249
The vulnerability CVE-2012-4249 affects Amazon Kindle Touch prior to 5.1.2, specifically the com.lab126.system sendEvent implementation. The issue allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a string, demonstrated by lipc-set-prop to set an LIPC pr...
PT-2012-5277
Name of the Vulnerable Software and Affected Versions com.lab126.system versions prior to 5.1.2 Description The issue allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a string. This can be demonstrated by using lipc-set-prop to set an LIPC property...
CVE-2012-4249: Improper Control of Generation of Code
The Amazon Lab126 com.lab126.system sendEvent implementation on the Kindle Touch before 5.1.2 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a string, as demonstrated by using lipc-set-prop to set an LIPC property, a different vulnerability than...
Scientific Linux Security Update : lftp on SL5.x i386/x86_64
CVE-2007-2348 lftp mirror --script does not escape names and targets of symbolic links It was discovered that lftp did not properly escape shell metacharacters when generating shell scripts using the 'mirror --script' command. A mirroring script generated to download files from a malicious FTP...
DEBIAN-CVE-2012-2140
The Mail gem before 2.4.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a 1 sendmail or 2 exim delivery...
CVE-2012-2140
The Mail gem before 2.4.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a 1 sendmail or 2 exim delivery...
Code injection
The Mail gem before 2.4.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a 1 sendmail or 2 exim delivery...
CVE-2012-2140
The Mail gem before 2.4.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a 1 sendmail or 2 exim delivery...
CVE-2012-2140
The CVE-2012-2140 entry concerns the rubygem-mail package for Ruby, version prior to 2.4.3. The vulnerability arises in the mail gem’s Exim/Sendmail delivery paths where improper input handling allows a remote attacker to execute arbitrary commands via shell metacharacters. Public documentation i...
CVE-2012-2140
The Mail gem before 2.4.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a 1 sendmail or 2 exim delivery...
CVE-2012-2140: Improper Input Validation
The Mail gem before 2.4.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a 1 sendmail or 2 exim delivery...
PT-2012-3832
Name of the Vulnerable Software and Affected Versions Mail gem versions prior to 2.4.3 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a sendmail or exim delivery. Recommendations For Mail gem versions prior to 2.4.3, update to version 2.4.3...