gnomevfs -- unsafe URI handling

2004-08-0400:00:00

vuxml.freebsd.org

0.012 Low

EPSS

Percentile

85.4%

JSON

Alexander Larsson reports that some versions of gnome-vfs and
MidnightCommander contain a number of `extfs’ scripts that do not
properly validate user input. If an attacker can cause her
victim to process a specially-crafted URI, arbitrary commands
can be executed with the privileges of the victim.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchgnomevfs2< 2.6.2_1UNKNOWN
FreeBSDanynoarchgnomevfs< 1.0.5_6UNKNOWN
FreeBSDanynoarchmc<= 4.6.0_12UNKNOWN