CVE-2004-2610

CVE-2004-2610 affects mntd. The issue is in mntd_mount.c in mntd before 0.4.2, where local users may gain privileges via shell metacharacters in a remount option within the configuration file. The underlying cause is the handling of shell metacharacters in the remount option, enabling elevation o...

CVE-2004-2610: Undefined Security Weakness

mntdmount.c in mntd before 0.4.2 might allow local users to gain privileges via shell metacharacters in a remount option in the configuration file. NOTE: It is not clear whether this is a vulnerability because there is not necessarily any common usage in which privilege boundaries are crossed...

CVE-2004-2630: Undefined Security Weakness

The MIME transformation system transformations/textplainexternal.inc.php in phpMyAdmin 2.5.0 up to 2.6.0-pl1 allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors...

CVE-2005-3750

Opera before 8.51 on Linux and Unix systems allows remote attackers to execute arbitrary code via shell metacharacters backticks in a URL that another product provides in a command line argument when launching Opera...

CVE-2005-3750

CVE-2005-3750 affects Opera before 8.51 on Linux/Unix. A remote attacker can execute arbitrary code by supplying a URL containing shell metacharacters (backticks) in a command-line argument used to launch Opera, enabling code execution without user interaction. The vulnerability score is CVSS v2 ...

CVE-2005-3750

Opera before 8.51 on Linux and Unix systems allows remote attackers to execute arbitrary code via shell metacharacters backticks in a URL that another product provides in a command line argument when launching Opera...

CVE-2005-3750: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Opera before 8.51 on Linux and Unix systems allows remote attackers to execute arbitrary code via shell metacharacters backticks in a URL that another product provides in a command line argument when launching Opera...

CVE-2003-1248

CVE-2003-1248 affects H-Sphere WebShell 2.3. The vulnerability allows remote command execution by passing shell metacharacters in the mode and zipfile URL parameters. Impact is partial confidentiality, integrity, and availability. No explicit exploitation status is provided in the documents; expl...

CVE-2003-1248: Undefined Security Weakness

H-Sphere WebShell 2.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 mode and 2 zipfile parameters in a URL request...

CVE-2002-2201: Undefined Security Weakness

The Printer Administration module for Webmin 0.990 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the printer name...

CVE-2005-3330

The CVE-2005-3330 entry concerns Snoopy 1.2, where the _httpsrequest function allows remote command execution via shell metacharacters in an HTTPS URL to an SSL page, due to improper handling in the fetch function. Affected usage includes MagpieRSS, WordPress, Ampache, and Jinzora. Documented imp...

CVE-2005-3330

The httpsrequest function in Snoopy 1.2, as used in products such as 1 MagpieRSS, 2 WordPress, 3 Ampache, and 4 Jinzora, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTPS URL to an SSL protected web page, which is not properly handled by the fetch function...

Debian DSA-868-1 : mozilla-thunderbird - several vulnerabilities

Several security-related problems have been discovered in Mozilla and derived programs. Some of the following problems don't exactly apply to Mozilla Thunderbird, even though the code is present. In order to keep the codebase in sync with upstream it has been altered nevertheless. The Common...

CVE-2005-3277

The LPD service in HP-UX 10.20 11.11 11i and earlier allows remote attackers to execute arbitrary code via shell metacharacters "" or single backquote in a request that is not properly handled when an error occurs, as demonstrated by killing the connection, a different vulnerability than...

CVE-2005-3277

CVE-2005-3277 documents a remote command-execution vulnerability in HP-UX LPD where shell metacharacters in a crafted request trigger code execution, affecting HP-UX 10.20 and 11.11 (11i) and earlier. The issue is tied to error-path handling and is explicitly noted as distinct from CVE-2002-1473....

CVE-2005-3277: Undefined Security Weakness

The LPD service in HP-UX 10.20 11.11 11i and earlier allows remote attackers to execute arbitrary code via shell metacharacters "" or single backquote in a request that is not properly handled when an error occurs, as demonstrated by killing the connection, a different vulnerability than...

CVE-2005-2925

runpriv in SGI IRIX allows local users to bypass intended restrictions and execute arbitrary commands via shell metacharacters in a command line for a privileged binary in /usr/sysadm/privbin...

CVE-2005-2925

runpriv in SGI IRIX allows local users to bypass intended restrictions and execute arbitrary commands via shell metacharacters in a command line for a privileged binary in /usr/sysadm/privbin...

CVE-2005-2925: Undefined Security Weakness

runpriv in SGI IRIX allows local users to bypass intended restrictions and execute arbitrary commands via shell metacharacters in a command line for a privileged binary in /usr/sysadm/privbin...

security flaw

Firefox 1.0.6 and Mozilla 1.7.10 allows attackers to execute arbitrary commands via shell metacharacters in a URL that is provided to the browser on the command line, which is sent unfiltered to bash...