Xfce terminal client unescaped shell characters vulnerability

Shell characters are not filtered on URL processing...

[ GLSA 200708-07 ] Xfce Terminal: Remote arbitrary code execution

Gentoo Linux Security Advisory GLSA 200708-07 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

GLSA-200708-07 : Xfce Terminal: Remote arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-200708-07 Xfce Terminal: Remote arbitrary code execution Lasse Karkkainen discovered that the function terminalhelperexecute in file terminal-helper.c does not properly escape the URIs before processing. Impact : A remote attacker...

Xfce Terminal: Remote arbitrary code execution

Background Xfce Terminal is a console tool for the Xfce desktop environment. Description Lasse Karkkainen discovered that the function terminalhelperexecute in file terminal-helper.c does not properly escape the URIs before processing. Impact A remote attacker could entice a user to open a...

CVE-2007-3770

The terminalhelperexecute function in terminal/terminal.c in Xfce Terminal 0.2.6 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a crafted link, as demonstrated using the "Open Link" functionality...

Open redirect

The terminalhelperexecute function in terminal/terminal.c in Xfce Terminal 0.2.6 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a crafted link, as demonstrated using the "Open Link" functionality...

CVE-2007-3770

The terminalhelperexecute function in terminal/terminal.c in Xfce Terminal 0.2.6 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a crafted link, as demonstrated using the "Open Link" functionality...

DEBIAN-CVE-2007-3770

The terminalhelperexecute function in terminal/terminal.c in Xfce Terminal 0.2.6 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a crafted link, as demonstrated using the "Open Link" functionality...

CVE-2007-3770

The terminalhelperexecute function in terminal/terminal.c in Xfce Terminal 0.2.6 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a crafted link, as demonstrated using the "Open Link" functionality...

CVE-2007-3770

The CVE-2007-3770 entry corresponds to a vulnerability in Xfce Terminal 0.2.6 where the terminal_helper_execute function in terminal/terminal.c allows command execution via shell metacharacters in a crafted link opened through the terminal’s Open Link feature. Impact is arbitrary command executio...

CVE-2007-3770

The terminalhelperexecute function in terminal/terminal.c in Xfce Terminal 0.2.6 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a crafted link, as demonstrated using the "Open Link" functionality...

CVE-2007-3770

The terminalhelperexecute function in terminal/terminal.c in Xfce Terminal 0.2.6 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a crafted link, as demonstrated using the "Open Link" functionality...

CVE-2007-3770: Undefined Security Weakness

The terminalhelperexecute function in terminal/terminal.c in Xfce Terminal 0.2.6 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a crafted link, as demonstrated using the "Open Link" functionality...

CVE-2000-1060

The CVE-2000-1060 entry describes a vulnerability in XFCE 3.5.1 where the default xinitrc configuration runs xhost + localhost, bypassing Xauthority access control. This local-privilege issue allows nearby users to sniff X11 traffic and potentially escalate privileges. The root cause is the insec...

CVE-2000-1060

The default configuration of XFCE 3.5.1 bypasses the Xauthority access control mechanism with an "xhost + localhost" command in the xinitrc program, which allows local users to sniff X Windows traffic and gain privileges...

CVE-2000-1060: Undefined Security Weakness

The default configuration of XFCE 3.5.1 bypasses the Xauthority access control mechanism with an "xhost + localhost" command in the xinitrc program, which allows local users to sniff X Windows traffic and gain privileges...

CVE-2000-1060

The default configuration of XFCE 3.5.1 bypasses the Xauthority access control mechanism with an "xhost + localhost" command in the xinitrc program, which allows local users to sniff X Windows traffic and gain privileges...

Linux news 29.11.00

Linux kernel 2.4.0-test12-pre3 is out Вышла новая пре версия тестового ядра линукс 2.4.0-test12-pre3. На этот раз Проведена синхронизация с маинтайнером mps64 ветки. Так же изменения в VM, больше нет никакх проблем с исполозованием PageDirty и kiobuf'ов Подробнее:...

Дырка в xfce (startup script desktop access)

Скрипт, запускаемый при старте программы, позволяет доступ к рабочему столу любым локальным пользователям, что позволяет, например, перехватывать события клавиатуры...

Ports Security Advisory: FreeBSD-SA-00:65.xfce

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:65 Security Advisory FreeBSD, Inc. Topic: xfce allows local X session compromise Category: ports Module: xfce Announced: 2000-11-06 Credits: Nicholas Brawn...