Searching popen software vulnerabilities

SunOS sendmail 5.59 through 5.65 uses popen to

sendmail | SunOS |

SunOS sendmail 5.59 through 5.65 uses popen to process a forwarding host argument, which allows local users to gain root privileges by modifying the IFS (Internal Field Separator) variable and passing crafted values to the -oR option.


cron in OpenBSD 2.5 allows local users to gain

privileges | terminated | function | OpenBSD | argv[] | cron's | passed | allows | which | users | popen | local | root | fake | gain | NULL | cron | not | via |

cron in OpenBSD 2.5 allows local users to gain root privileges via an argv[] that is not NULL terminated, which is passed to cron's fake popen function.


xfsmd for IRIX 6.5 through 6.5.16 allows remote

through | xfsmd | IRIX |

xfsmd for IRIX 6.5 through 6.5.16 allows remote attackers to execute arbitrary code via shell metacharacters that are not properly filtered from several calls to the popen() function, such as export_fs().


SQL injection vulnerability in Cacti 0.8.6i and

register_argc_argv | vulnerability | attackers | arbitrary | injection | commands | execute | enabled | earlier | remote | allows | Cacti | 086i | via | SQL |

SQL injection vulnerability in Cacti 0.8.6i and earlier, when register_argc_argv is enabled, allows remote attackers to execute arbitrary SQL commands via the (1) second or (2) third arguments to cmd.php. NOTE: this issue can be leveraged to execute arbitrary commands since the SQL query results are later used in the polling_items array and popen function.


clamav-milter in ClamAV before 0.91.2, when run

clamav-milter | before | ClamAV |

clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to execute arbitrary commands via shell metacharacters that are used in a certain popen call, involving the "recipient field of sendmail."


Software vulnerabilities results 1 to 6 of 6     
Page: 1