VYPR

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

BaseStableLikelihood: High

Description

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Hierarchy (View 1000)

Parents

Children

none

Related attack patterns (CAPEC)

CAPEC-108 · CAPEC-15 · CAPEC-43 · CAPEC-6 · CAPEC-88

CVEs mapped to this weakness (6,883)

page 343 of 345
  • CVE-2011-4502Nov 22, 2011
    Edimax
    6114wg
    risk 0.00cvss —epss 0.05

    The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg, Canyon-Tech CN-WF512 with firmware 1.83, Canyon-Tech CN-WF514 with firmware 2.08, Sitecom WL-153 with firmware before 1.39, and Sweex LB000021 with firmware 3.15…

  • CVE-2011-2148May 20, 2011
    Smartertools
    Smarterstats
    risk 0.00cvss —epss 0.05

    Admin/frmSite.aspx in the SmarterTools SmarterStats 6.0 web server allows remote attackers to execute arbitrary commands via vectors involving a leading and trailing & (ampersand) character, and (1) an STTTState cookie, (2) the ctl00%24MPH%24txtAdminNewPassword_SettingText…

  • CVE-2011-1904May 5, 2011
    Proofpoint
    Messaging Security Gateway
    risk 0.00cvss —epss 0.02

    An unspecified function in the web interface in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protection Server 5.5.3, 5.5.4, 5.5.5, 6.0.2, 6.1.1, and 6.2.0 allows remote attackers to execute arbitrary commands via unknown vectors, related…

  • CVE-2011-0456Mar 11, 2011
    OTRS
    Otrs
    risk 0.00cvss —epss 0.03

    webscript.pl in Open Ticket Request System (OTRS) 2.3.4 and earlier allows remote attackers to execute arbitrary commands via unspecified vectors, related to a "command injection vulnerability."

  • CVE-2011-0382Feb 25, 2011
    Cisco Systems, Inc.
    Telepresence Recording Server
    risk 0.00cvss —epss 0.04

    The CGI subsystem on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 allows remote attackers to execute arbitrary commands via a request to TCP port 443, related to a "command injection vulnerability," aka Bug ID CSCtf97221.

  • CVE-2011-0381Feb 25, 2011
    Cisco Systems, Inc.
    Telepresence Manager
    risk 0.00cvss —epss 0.05

    Cisco TelePresence Manager 1.2.x through 1.6.x allows remote attackers to perform unspecified actions and consequently execute arbitrary code via a crafted request to the Java RMI interface, related to a "command injection vulnerability," aka Bug ID CSCtf97085.

  • CVE-2011-0378Feb 25, 2011
    Cisco Systems, Inc.
    TelePresence endpoint
    risk 0.00cvss —epss 0.01

    The XML-RPC implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a TCP request, related to a "command injection vulnerability," aka Bug ID CSCtb52587.

  • CVE-2011-0375Feb 25, 2011
    Cisco Systems, Inc.
    Telepresence System Software
    risk 0.00cvss —epss 0.03

    The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCth24671.

  • CVE-2011-0374Feb 25, 2011
    Cisco Systems, Inc.
    Telepresence System Software
    risk 0.00cvss —epss 0.03

    The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCtb31659.

  • CVE-2011-0373Feb 25, 2011
    Cisco Systems, Inc.
    TelePresence endpoint devices
    risk 0.00cvss —epss 0.03

    The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCtb31685.

  • CVE-2011-0372Feb 25, 2011
    Cisco Systems, Inc.
    TelePresence endpoint devices
    risk 0.00cvss —epss 0.03

    The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCtb31640.

  • CVE-2010-3757Oct 5, 2010
    IBM
    Tivoli Storage Manager Fastback
    risk 0.00cvss —epss 0.04

    Format string vulnerability in the _Eventlog function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 allows remote attackers to execute arbitrary code via format string specifiers located after…

  • CVE-2010-3754Oct 5, 2010
    IBM
    Tivoli Storage Manager Fastback
    risk 0.00cvss —epss 0.05

    The FXCLI_OraBR_Exec_Command function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 uses values of packet fields to determine the content and length of data copied to memory, which allows…

  • CVE-2010-3753Oct 5, 2010
    Xelerance
    Openswan
    risk 0.00cvss —epss 0.02

    programs/pluto/xauth.c in the client in Openswan 2.6.26 through 2.6.28 allows remote authenticated gateways to execute arbitrary commands via shell metacharacters in the cisco_banner (aka server_banner) field, a different vulnerability than CVE-2010-3308.

  • CVE-2010-3752Oct 5, 2010
    Xelerance
    Openswan
    risk 0.00cvss —epss 0.02

    programs/pluto/xauth.c in the client in Openswan 2.6.25 through 2.6.28 allows remote authenticated gateways to execute arbitrary commands via shell metacharacters in (1) cisco_dns_info or (2) cisco_domain_info data in a packet, a different vulnerability than CVE-2010-3302.

  • CVE-2010-2445Jul 8, 2010
    Freeciv
    Freeciv
    risk 0.00cvss —epss 0.03

    freeciv 2.2 before 2.2.1 and 2.3 before 2.3.0 allows attackers to read arbitrary files or execute arbitrary commands via a scenario that contains Lua functionality, related to the (1) os, (2) io, (3) package, (4) dofile, (5) loadfile, (6) loadlib, (7) module, and (8) require…

  • CVE-2010-0418Mar 10, 2010
    Chumby
    Chumby One
    risk 0.00cvss —epss 0.03

    The web interface in chumby one before 1.0.4 and chumby classic before 1.7.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a request.

  • CVE-2010-0934Mar 5, 2010
    Rogue Wave
    Perforce Server
    risk 0.00cvss —epss 0.02

    The triggers functionality in Perforce Server 2008.1 allows remote authenticated users with super privileges to execute arbitrary operating-system commands by using a "p4 client" command in conjunction with the form-in trigger script.

  • CVE-2009-4644Feb 19, 2010
    Accellion
    File Transfer Appliance
    risk 0.00cvss —epss 0.02

    Accellion Secure File Transfer Appliance before 8_0_105 allows remote authenticated administrators to bypass the restricted shell and execute arbitrary commands via shell metacharacters to the ping command, as demonstrated by modifying the cli program.

  • CVE-2009-4025Nov 29, 2009
    Pear
    Pear
    risk 0.00cvss —epss 0.06

    Argument injection vulnerability in the traceroute function in Traceroute.php in the Net_Traceroute package before 0.21.2 for PEAR allows remote attackers to execute arbitrary shell commands via the host parameter. NOTE: some of these details are obtained from third party…