CVE-2002-0508

wwwisis 3.45 and earlier allows remote attackers to execute arbitrary commands and read files via the parameters 1 prolog or 2 epilog...

CVE-2001-0889

Exim 3.22 and earlier, in some configurations, does not properly verify the local part of an address when redirecting the address to a pipe, which could allow remote attackers to execute arbitrary commands via shell metacharacters...

Xchat /dns command execution vulnerability

Xchat - Remote command execution name : Xchat date : 27/3/2002 description : Xchat is a graphical IRC client widely used in the linux and bsd community severity : Low risk homepage : www.xchat.org versions : probably all Bug description : There is an issue by the way xchat handle the /exec comman...

adstreamer.txt

RFP's note: I have verified this vulnerability in the current version on the site indicated below. The most severe problem would be that the "$input'cat'.dat" open in banner.cgi would allow an attacker to run commands the 'cat' parameter is not double-checked/filtered in any way. The other CGIs a...

Bug found at W3Mail Webmail

Name: W3Mail 1.0.2 Personal and Commercial Version Author: Spencer Miles Problem: Script doesnt check for special metacharacters like &;'"|?^$nr. Any webmail user can execute nix commands on webserver. Exploit: On any field at "Compose Message", put something like: Recipient example [email protected]";...

Textor Webmasters Ltd (listrec.pl)

Last update of listrec.pl Jon Wright 11/11/1998. This script has vulnerability does not filter input of the user which allows to carry out commands from WebServer. EXPLOIT: www.server.com/cgi-bin/common/listrec.pl? APP=qmh-news&TEMPLATE=;ls| XP-TEAM...

CVE-2001-0113

statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to execute arbitrary commands via the mostbrowsers parameter, whose value is used as part of a generated Perl script...

Microsoft Internet Explorer 5.0.1/5.5/6.0 - Telnet Client File Overwrite

source: https://www.securityfocus.com/bid/2463/info Services for Unix 2.0 contains a client side logging option which records all information exchanged in a telnet session. A vulnerability exists that could enable a remote user to invoke the telnet client and execute arbitrary commands on a targe...

MailMan Webmail mmstdod.cgi Arbitrary Command Execution

The version of MailMan Webmail on the remote web server has an arbitrary command execution vulnerability. Input to the 'ALTERNATETEMPLATES' parameter of mmstdod.cgi is not properly sanitized. A remote attacker could exploit this to execute arbitrary commands on the system. %NASLMINLEVEL 70300 C...

antisniff latest ("two times fixed") version still exploitable, l0phtl0phe-kid.c

=========================== Big Brother Security Notice =========================== Versions: All prior to 1.4g Module: bbd.c the bb server: BBDISPLAY/BBPAGER Affects: All BBDISPLAY/BBPAGER machines running bbd Summary: Vulnerabilities exists such that arbitrary commands can be executed with the...

Дырка в BizDB

bizdb-search.cgi запускает внешнее приложение передавая в командной строке аргумент, вводимый пользователем не проверяя его на наличие мета-символов. Это позволяет выполнить любое приложение на сервере...

Daniel Beckham The Finger Server 0.82 Beta - Pipe

source: https://www.securityfocus.com/bid/974/info 'The Finger Server' is a perl script for providing .plan-like functionality through a website. Due to insufficient input checking it is possible for remote unauthenticated users to execute shell commands on the server which will run with the...

Multiple Vendor jj CGI Arbitrary Command Execution

The 'jj' CGI is installed. This CGI has a well-known security flaw that lets a remote attacker execute arbitrary commands with the privileges of the web server. Please note that Nessus only checked for the existence of this CGI, and did not attempt to exploit it. %NASLMINLEVEL 70300 C Tenable...

WU-FTPD SITE EXEC Arbitrary Local Command Execution

The remote host is running a version of WU-FTPD that is affected by a command execution vulnerability. It is possible to execute arbitrary command son the remote host using the 'site exec' FTP problem. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10090;...

Ray Chan WWW Authorization Gateway 0.1 - Command Execution

source: https://www.securityfocus.com/bid/152/info A vulnerability exists in the WWW Authorization Gateway program written by Ray Chan. Version 1.0 fails to eliminate characters with special meaning to the shell prior to executing a command. As a result, an attacker can utilize certain characters...