Lucene search
PRIOn knowledge basePRION:CVE-2007-3770HistoryJul 15, 2007 - 9:30 p.m.
Open redirect
2007-07-1521:30:00
PRIOn knowledge base
www.prio-n.com
1
The terminal_helper_execute function in terminal/terminal.c in Xfce Terminal 0.2.6 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a crafted link, as demonstrated using the “Open Link” functionality.
| CPE | Name | Operator | Version |
|---|---|---|---|
| xfce_terminal | eq | 0.2.6 |
References
bugs.gentoo.org/show_bug.cgi?id=184886
osvdb.org/38082
secunia.com/advisories/26037
secunia.com/advisories/26392
secunia.com/advisories/26418
secunia.com/advisories/27374
security.gentoo.org/glsa/glsa-200708-07.xml
www.debian.org/security/2007/dsa-1393
www.securityfocus.com/bid/24889
www.ubuntu.com/usn/usn-497-1
exchange.xforce.ibmcloud.com/vulnerabilities/35379
Related
cve
cve
CVE-2007-3770
2007-07-15 21:30:00
fedora
fedora
[SECURITY] Fedora 7 Update: Terminal-0.2.6-3.fc7
2007-08-15 19:48:33
[SECURITY] Fedora 7 Update: Terminal-0.2.8-2.fc7
2007-12-15 19:29:50
openvas
openvas
Fedora Update for Terminal FEDORA-2007-1620
2009-02-27 00:00:00
Debian Security Advisory DSA 1393-1 (xfce4-terminal)
2008-01-17 00:00:00
Ubuntu Update for xfce4-terminal vulnerability USN-497-1
2009-03-23 00:00:00
nessus
nessus
Ubuntu 6.06 LTS / 6.10 / 7.04 : xfce4-terminal vulnerability (USN-497-1)
2007-11-10 00:00:00
GLSA-200708-07 : Xfce Terminal: Remote arbitrary code execution
2007-08-13 00:00:00
Debian DSA-1393-1 : xfce4-terminal - insecure execution
2007-10-25 00:00:00
securityvulns
securityvulns
Xfce terminal client unescaped shell characters vulnerability
2007-08-14 00:00:00
[ GLSA 200708-07 ] Xfce Terminal: Remote arbitrary code execution
2007-08-14 00:00:00
ubuntu
ubuntu
xfce4-terminal vulnerability
2007-08-14 00:00:00
debian
debian
nvd
nvd
CVE-2007-3770
2007-07-15 21:30:00
cvelist
cvelist
CVE-2007-3770
2007-07-15 21:00:00
gentoo
gentoo
Xfce Terminal: Remote arbitrary code execution
2007-08-11 00:00:00
seebug
seebug
Xfce-Terminal远程命令注入漏洞
2007-08-14 00:00:00
debiancve
debiancve
CVE-2007-3770
2007-07-15 21:30:00
ubuntucve
ubuntucve
CVE-2007-3770
2007-07-15 00:00:00