shell software vulnerabilities
vulnerabilities.aspcode.net
Searching shell software vulnerabilities
dfire.cgi script in Dragon-Fire IDS allows remo
metacharacters
|
Dragon-Fire
|
commands
|
dfirecgi
|
execute
|
remote
|
script
|
allows
|
shell
|
users
|
IDS
|
via
|
dfire.cgi script in Dragon-Fire IDS allows remote users to execute commands via shell metacharacters.
Mutt mail client allows a remote attacker to ex
metacharacters
|
attacker
|
commands
|
execute
|
allows
|
client
|
remote
|
shell
|
Mutt
|
mail
|
via
|
Mutt mail client allows a remote attacker to execute commands via shell metacharacters.
Whois Internic Lookup program whois.cgi allows
metacharacters
|
attackers
|
whoiscgi
|
Internic
|
commands
|
execute
|
program
|
Lookup
|
domain
|
remote
|
allows
|
Whois
|
entry
|
shell
|
via
|
Whois Internic Lookup program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry.
Matt's Whois program whois.cgi allows remote at
metacharacters
|
attackers
|
whoiscgi
|
commands
|
execute
|
program
|
remote
|
Matt's
|
domain
|
allows
|
shell
|
Whois
|
entry
|
via
|
Matt's Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry.
CC Whois program whois.cgi allows remote attack
metacharacters
|
attackers
|
whoiscgi
|
commands
|
execute
|
program
|
domain
|
remote
|
allows
|
Whois
|
entry
|
shell
|
via
|
CC Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry.
LakeWeb Filemail CGI script allows remote attac
metacharacters
|
attackers
|
arbitrary
|
recipient
|
Filemail
|
commands
|
address
|
execute
|
LakeWeb
|
script
|
remote
|
allows
|
email
|
shell
|
via
|
CGI
|
LakeWeb Filemail CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient email address.
The textcounter.pl by Matt Wright allows remote
metacharacters
|
textcounterpl
|
attackers
|
arbitrary
|
commands
|
execute
|
Wright
|
remote
|
allows
|
shell
|
Matt
|
via
|
The textcounter.pl by Matt Wright allows remote attackers to execute arbitrary commands via shell metacharacters.
shell-lock in Cactus Software Shell Lock uses w
encryption
|
shell-lock
|
Software
|
Cactus
|
Shell
|
weak
|
Lock
|
uses
|
shell-lock in Cactus Software Shell Lock uses weak encryption (trivial encoding) which allows attackers to easily decrypt and obtain the source code.
resend command in Majordomo allows local users
metacharacters
|
privileges
|
Majordomo
|
command
|
resend
|
allows
|
shell
|
users
|
local
|
gain
|
via
|
resend command in Majordomo allows local users to gain privileges via shell metacharacters.
DNSTools CGI applications allow remote attacker
metacharacters
|
applications
|
attackers
|
arbitrary
|
DNSTools
|
commands
|
execute
|
remote
|
shell
|
allow
|
CGI
|
via
|
DNSTools CGI applications allow remote attackers to execute arbitrary commands via shell metacharacters.
WindMail allows remote attackers to read arbitr
metacharacters
|
attackers
|
arbitrary
|
commands
|
WindMail
|
execute
|
remote
|
allows
|
shell
|
files
|
read
|
via
|
WindMail allows remote attackers to read arbitrary files or execute commands via shell metacharacters.
The Microsoft Jet database engine allows an att
vulnerability
|
Microsoft
|
attacker
|
commands
|
database
|
execute
|
Shell"
|
engine
|
allows
|
query
|
"VBA
|
Jet
|
via
|
aka
|
The Microsoft Jet database engine allows an attacker to execute commands via a database query, aka the "VBA Shell" vulnerability.
Directory traversal vulnerability in the "Shell
vulnerability
|
capability
|
Microsoft
|
traversal
|
Directory
|
Folders"
|
Windows
|
Server
|
"Shell
|
Directory traversal vulnerability in the "Shell Folders" capability in Microsoft Windows Server 2003 allows remote attackers to read arbitrary files via .. (dot dot) sequences in a "shell:" link.
Acrowave AAP-3100AR wireless router allows remo
authentication
|
AAP-3100AR
|
attackers
|
pressing
|
password
|
username
|
Acrowave
|
wireless
|
restart
|
session
|
bypass
|
telnet
|
remote
|
causes
|
CTRL-C
|
router
|
prompt
|
allows
|
leave
|
crash
|
which
|
shell
|
user
|
then
|
new
|
Acrowave AAP-3100AR wireless router allows remote attackers to bypass authentication by pressing CTRL-C at the username or password prompt in a telnet session, which causes the shell to crash and restart, then leave the user in the new shell.
The getemails function in C.J. Steele Tattle al
metacharacters
|
demonstrated
|
arbitrary
|
attackers
|
getemails
|
username
|
commands
|
function
|
certain
|
entries
|
execute
|
remote
|
Steele
|
allows
|
Tattle
|
using
|
shell
|
FTP
|
via
|
log
|
The getemails function in C.J. Steele Tattle allows remote attackers to execute arbitrary commands via shell metacharacters in certain log entries, as demonstrated using shell metacharacters in an FTP username.
SSH Tectia Server 4.3.1 and earlier, and SSH Se
Server
|
Tectia
|
SSH
|
SSH Tectia Server 4.3.1 and earlier, and SSH Secure Shell for Windows Servers, uses insecure permissions when generating the Secure Shell host identification key, which allows local users to access the key and spoof the server.
Unspecified vulnerability in guestex.pl in Teca
metacharacters
|
vulnerability
|
Unspecified
|
parameter
|
attackers
|
arbitrary
|
involving
|
guestexpl
|
possibly
|
commands
|
Guestex
|
Scripts
|
execute
|
allows
|
remote
|
shell
|
email
|
Teca
|
via
|
Unspecified vulnerability in guestex.pl in Teca Scripts Guestex 1.0 allows remote attackers to execute arbitrary shell commands via the email parameter, possibly involving shell metacharacters.
Usermin before 1.220 (20060629) allows remote a
Usermin
|
before
|
Usermin before 1.220 (Thursday, June 29, 2006) allows remote attackers to read arbitrary files, possibly related to chfn/save.cgi not properly handling an empty shell parameter, which results in changing root's shell instead of the shell of a specified user.
my.activation.php3 in F5 FirePass 4100 SSL VPN
myactivationphp3
|
FirePass
|
my.activation.php3 in F5 FirePass 4100 SSL VPN allows remote attackers to execute arbitrary shell commands via shell metacharacters in the username parameter.
PHPMailer 1.7, when configured to use sendmail,
classphpmailerphp
|
metacharacters
|
SendmailSend
|
configured
|
attackers
|
PHPMailer
|
arbitrary
|
commands
|
sendmail
|
function
|
execute
|
remote
|
allows
|
shell
|
use
|
via
|
PHPMailer 1.7, when configured to use sendmail, allows remote attackers to execute arbitrary shell commands via shell metacharacters in the SendmailSend function in class.phpmailer.php.
Software vulnerabilities results 1 to 20 of 343
Page:
1
2
3
4
5
...
18
►