CVE-2007-3770
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:C/I:P/A:N
7.2 High
AI Score
Confidence
Low
0.02 Low
EPSS
Percentile
89.0%
The terminal_helper_execute function in terminal/terminal.c in Xfce Terminal 0.2.6 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a crafted link, as demonstrated using the βOpen Linkβ functionality.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| os-cillation:xfce_terminal | os-cillation xfce terminal | eq | 0.2.6 |
References
bugs.gentoo.org/show_bug.cgi?id=184886
osvdb.org/38082
secunia.com/advisories/26037
secunia.com/advisories/26392
secunia.com/advisories/26418
secunia.com/advisories/27374
security.gentoo.org/glsa/glsa-200708-07.xml
www.debian.org/security/2007/dsa-1393
www.securityfocus.com/bid/24889
www.ubuntu.com/usn/usn-497-1
exchange.xforce.ibmcloud.com/vulnerabilities/35379
Related
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:C/I:P/A:N
7.2 High
AI Score
Confidence
Low
0.02 Low
EPSS
Percentile
89.0%