CVE

Id
9465  
CVE No.
CVE-2004-1037  
Status
Candidate  
Description
The search function in TWiki 20030201 allows remote attackers to execute arbitrary commands via shell metacharacters in a search string.  
Phase
Assigned (20041116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
63595 9465 CVE-2004-1037 BUGTRAQ:20041112 TWiki search function allows arbitrary shell command execution  View
63596 9465 CVE-2004-1037 URL:http://marc.info/?l=bugtraq&m=110037207516456&w=2  View
63597 9465 CVE-2004-1037 FULLDISC:20041116 Re: [Full-Disclosure] TWiki search function allows arbitrary shell command execution  View
63598 9465 CVE-2004-1037 URL:http://archives.neohapsis.com/archives/bugtraq/2004-11/0201.html  View
63599 9465 CVE-2004-1037 CONFIRM:http://twiki.org/cgi-bin/view/Codev/SecurityAlertExecuteCommandsWithSearch  View
63600 9465 CVE-2004-1037 CONECTIVA:CLA-2005:918  View
63601 9465 CVE-2004-1037 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000918  View
63602 9465 CVE-2004-1037 GENTOO:GLSA-200411-33  View
63603 9465 CVE-2004-1037 URL:http://security.gentoo.org/glsa/glsa-200411-33.xml  View
63604 9465 CVE-2004-1037 CIAC:P-039  View
63605 9465 CVE-2004-1037 URL:http://www.ciac.org/ciac/bulletins/p-039.shtml  View
63606 9465 CVE-2004-1037 BID:11674  View
63607 9465 CVE-2004-1037 URL:http://www.securityfocus.com/bid/11674  View
63608 9465 CVE-2004-1037 XF:twik-search-command-execution(18062)  View

Related JVN