[SECURITY] Fedora 7 Update: libxfcegui4-4.4.2-1.fc7

The package includes various gtk widgets for Xfce...

[SECURITY] Fedora 7 Update: xfdesktop-4.4.2-1.fc7

This package includes a desktop manager for the XFce Desktop Environment...

[SECURITY] Fedora 7 Update: xfce4-sensors-plugin-0.10.99.2-3.fc7

This plugin displays various hardware sensor values in the Xfce panel...

[SECURITY] Fedora 7 Update: xfce4-cpugraph-plugin-0.4.0-2.fc7

A CPU monitor plugin for the Xfce panel. It offers multiple display modes LED, gradient, fire, etc... to show the current CPU load of the system. T he colors and the size of the plugin are customizable...

[SECURITY] Fedora 7 Update: xfce4-fsguard-plugin-0.4.0-2.fc7

A little Xfce plugin, which checks the free space on the chosen mountpoint frequently. It displays 4 different icons and a message box, depending on t he free space. The amount of free disk space is visible in a tooltip. If you left-click on its icon, it opens the mountpoint directory in the file...

[SECURITY] Fedora 7 Update: xfce4-panel-4.4.2-1.fc7

This package includes the panel for the Xfce desktop environment...

[SECURITY] Fedora 7 Update: xfwm4-4.4.2-1.fc7

xfwm4 is a window manager compatible with GNOME, GNOME2, KDE2, KDE3 and Xfc e...

[SECURITY] Fedora 7 Update: xfce-mcs-plugins-4.4.2-1.fc7

This package inlcudes a set of plugins for the multi channel settings manager...

[SECURITY] Fedora 7 Update: xfce-utils-4.4.2-1.fc7

This package includes utilities for the Xfce Desktop Environment...

[SECURITY] Fedora 7 Update: mousepad-0.2.13-1.fc7

Mousepad is a text editor for Xfce based on Leafpad. The initial reason for Mousepad was to provide printing support, which would have been difficult for Leafpad for various reasons. Although some features are under development, currently Mousepad has follow ing features: Complete support for UTF...

[SECURITY] Fedora 7 Update: libxfce4mcs-4.4.2-1.fc7

This package includes multi-channel settings management support for Xfce...

USN-497-1: xfce4-terminal vulnerability

Lasse Kärkkäinen discovered that the Xfce Terminal did not correctly escape shell meta-characters during "Open Link" actions. If a remote attacker tricked a user into opening a specially crafted URI, they could execute arbitrary commands with the user's privileges...

[ GLSA 200708-07 ] Xfce Terminal: Remote arbitrary code execution

Gentoo Linux Security Advisory GLSA 200708-07 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

Xfce terminal client unescaped shell characters vulnerability

Shell characters are not filtered on URL processing...

Xfce-Terminal远程命令注入漏洞

BUGTRAQ ID: 24889 CVECAN ID: CVE-2007-3770 Xfce Terminal是Xfce桌面环境的控制台工具。 Xfce Terminal在使用URL串构造命令调用时存在漏洞，远程攻击者可能利用此漏洞诱使用户执行恶意Shell命令。 Xfce-Terminal 0.2.6 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.xfce.org/ http://foo.bar/$xterm/ http://google.com/search?q=$ls&sourceid=b0rk...

GLSA-200708-07 : Xfce Terminal: Remote arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-200708-07 Xfce Terminal: Remote arbitrary code execution Lasse Karkkainen discovered that the function terminalhelperexecute in file terminal-helper.c does not properly escape the URIs before processing. Impact : A remote attacker...

Xfce Terminal: Remote arbitrary code execution

Background Xfce Terminal is a console tool for the Xfce desktop environment. Description Lasse Karkkainen discovered that the function terminalhelperexecute in file terminal-helper.c does not properly escape the URIs before processing. Impact A remote attacker could entice a user to open a...

CVE-2007-3770

The terminalhelperexecute function in terminal/terminal.c in Xfce Terminal 0.2.6 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a crafted link, as demonstrated using the "Open Link" functionality...

Open redirect

The terminalhelperexecute function in terminal/terminal.c in Xfce Terminal 0.2.6 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a crafted link, as demonstrated using the "Open Link" functionality...

CVE-2007-3770

The terminalhelperexecute function in terminal/terminal.c in Xfce Terminal 0.2.6 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a crafted link, as demonstrated using the "Open Link" functionality...