Xfce terminal client unescaped shell characters vulnerability
Published:		14.08.2007
Source:		BUGTRAQ
SecurityVulns ID:		8038
Type:		client
Level:		5/10
Description:		Shell characters are not filtered on URL processing.

Affected:		XFCE : terminal 2.0
CVE:		CVE-2007-3770 (The terminal_helper_execute function in terminal/terminal.c in Xfce Terminal 0.2.6 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a crafted link, as demonstrated using the "Open Link" functionality.)

Original document

GENTOO, [ GLSA 200708-07 ] Xfce Terminal: Remote arbitrary code execution (14.08.2007)

Discuss:

Read or add your comments to this news (0 comments)