Computer Security
[EN] securityvulns.ru no-pyccku


Xfce terminal client unescaped shell characters vulnerability
Published:14.08.2007
Source:
SecurityVulns ID:8038
Type:client
Threat Level:
5/10
Description:Shell characters are not filtered on URL processing.
Affected:XFCE : terminal 2.0
CVE:CVE-2007-3770 (The terminal_helper_execute function in terminal/terminal.c in Xfce Terminal 0.2.6 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a crafted link, as demonstrated using the "Open Link" functionality.)
Original documentdocumentGENTOO, [ GLSA 200708-07 ] Xfce Terminal: Remote arbitrary code execution (14.08.2007)

About | Terms of use | Privacy Policy
© SecurityVulns, 3APA3A, Vladimir Dubrovin
Nizhny Novgorod