xfce4-terminal vulnerability

2007-08-1400:00:00

ubuntu.com

6.7 Medium

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:C/I:P/A:N

0.009 Low

EPSS

Percentile

82.6%

JSON

Releases

Ubuntu 7.04
Ubuntu 6.10
Ubuntu 6.06

Details

Lasse Kärkkäinen discovered that the Xfce Terminal did not correctly
escape shell meta-characters during “Open Link” actions. If a remote
attacker tricked a user into opening a specially crafted URI, they could
execute arbitrary commands with the user’s privileges.

OSVersionArchitecturePackageVersionFilename
Ubuntu7.04noarchxfce4-terminal< 0.2.6-0ubuntu3.1UNKNOWN
Ubuntu6.10noarchxfce4-terminal< 0.2.5.4-0ubuntu2.1UNKNOWN
Ubuntu6.06noarchxfce4-terminal< 0.2.5+r21674-0ubuntu2.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	7.04	noarch	xfce4-terminal	< 0.2.6-0ubuntu3.1	UNKNOWN
Ubuntu	6.10	noarch	xfce4-terminal	< 0.2.5.4-0ubuntu2.1	UNKNOWN
Ubuntu	6.06	noarch	xfce4-terminal	< 0.2.5+r21674-0ubuntu2.1	UNKNOWN