CVE-2005-2847

The Barracuda Spam Firewall running firmware versions 3.1.16 and 3.1.17 is vulnerable to a remote command execution flaw in the img.pl component. An attacker can execute arbitrary commands by providing shell metacharacters in the f parameter. Versions prior to 3.1.18 are confirmed as vulnerable. ...

CVE-2005-2847

img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to execute arbitrary commands via shell metacharacters in the f parameter...

CVE-2005-2847: Undefined Security Weakness

img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to execute arbitrary commands via shell metacharacters in the f parameter...

CVE-2005-2773

CVE-2005-2773 affects HP OpenView Network Node Manager 6.2 through 7.50. The vulnerability enables remote attackers to execute arbitrary commands by injecting shell metacharacters into parameters handled by CGI scripts (connectedNodes.ovpl, cdpView.ovpl, freeIPaddrs.ovpl, ecscmg.ovpl). Public wri...

CVE-2005-2777

CVE-2005-2777 affects Looking Glass (Looking Glass 20040427). The issue is a remote command execution vulnerability: an attacker can craft shell metacharacters in the DNS lookup query field to run arbitrary commands, with the attacker able to execute code on the web server (per the description’s ...

CVE-2005-2773

HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 node parameter to connectedNodes.ovpl, 2 cdpView.ovpl, 3 freeIPaddrs.ovpl, and 4 ecscmg.ovpl...

CVE-2005-2773

HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 node parameter to connectedNodes.ovpl, 2 cdpView.ovpl, 3 freeIPaddrs.ovpl, and 4 ecscmg.ovpl...

CVE-2005-2777

Looking Glass 20040427 allows remote attackers to execute arbitrary commands via shell metacharacters in the DNS lookup query field...

CVE-2005-2773: Improper Neutralization of Special Elements used in a Command

HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 node parameter to connectedNodes.ovpl, 2 cdpView.ovpl, 3 freeIPaddrs.ovpl, and 4 ecscmg.ovpl...

CVE-2005-2773

HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 node parameter to connectedNodes.ovpl, 2 cdpView.ovpl, 3 freeIPaddrs.ovpl, and 4 ecscmg.ovpl. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker...

CVE-2005-2777: Undefined Security Weakness

Looking Glass 20040427 allows remote attackers to execute arbitrary commands via shell metacharacters in the DNS lookup query field...

CVE-2005-2716: Undefined Security Weakness

The eventpincoderequest function in the btsrv daemon btsrv.c in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in a Bluetooth device name...

CVE-2005-2682

CVE-2005-2682 affects the DTLink AreaEdit SpellChecker plugin before version 0.4.3. The vulnerability arises in aspell_setup.php where remote attackers can execute arbitrary commands by supplying shell metacharacters in the dictionary parameter (aka the lang variable). This constitutes remote cod...

CVE-2005-2684

The CVE-2005-2684 issue affects Netquery (Virtual Edge Netquery) version 3.11, where nquser.php processes the host parameter in a dig query. The underlying flaw allows remote attackers to inject shell metacharacters and execute arbitrary commands on the web server with the web application's user ...

CVE-2005-2684

nquser.php in Virtual Edge Netquery 3.11 allows remote attackers to execute arbitrary commands via shell metacharacters in the host parameter to a dig query...

CVE-2005-2684

nquser.php in Virtual Edge Netquery 3.11 allows remote attackers to execute arbitrary commands via shell metacharacters in the host parameter to a dig query...

CVE-2005-2684: Undefined Security Weakness

nquser.php in Virtual Edge Netquery 3.11 allows remote attackers to execute arbitrary commands via shell metacharacters in the host parameter to a dig query...

CVE-2005-2682: Undefined Security Weakness

aspellsetup.php in the SpellChecker plugin in DTLink AreaEdit before 0.4.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the dictionary parameter aka the lang variable...

CVE-2005-2651: Undefined Security Weakness

gorum/prod.php in Zorum 3.5 allows remote attackers to execute arbitrary code via shell metacharacters in the argv parameter...

CVE-2004-2425: Undefined Security Weakness

Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to execute arbitrary commands via accent and possibly other shell metacharacters in the query string to virtualinput.cgi...