Lucene search

K
ubuntucveUbuntu.comUB:CVE-2007-3770
HistoryJul 15, 2007 - 12:00 a.m.

CVE-2007-3770

2007-07-1500:00:00
ubuntu.com
ubuntu.com
4

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:C/I:P/A:N

0.009 Low

EPSS

Percentile

82.6%

The terminal_helper_execute function in terminal/terminal.c in Xfce
Terminal 0.2.6 allows user-assisted remote attackers to execute arbitrary
commands via shell metacharacters in a crafted link, as demonstrated using
the β€œOpen Link” functionality.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchxfce4-terminal<Β 0.2.5+r21674-0ubuntu2.1UNKNOWN
ubuntu6.10noarchxfce4-terminal<Β 0.2.5.4-0ubuntu2.1UNKNOWN
ubuntu7.04noarchxfce4-terminal<Β 0.2.6-0ubuntu3.1UNKNOWN

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:C/I:P/A:N

0.009 Low

EPSS

Percentile

82.6%