CVE

Id
27127  
CVE No.
CVE-2007-3770  
Status
Candidate  
Description
The terminal_helper_execute function in terminal/terminal.c in Xfce Terminal 0.2.6 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a crafted link, as demonstrated using the "Open Link" functionality.  
Phase
Assigned (20070715)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
277633 27127 CVE-2007-3770 MISC:http://bugs.gentoo.org/show_bug.cgi?id=184886  View
277634 27127 CVE-2007-3770 DEBIAN:DSA-1393  View
277635 27127 CVE-2007-3770 URL:http://www.debian.org/security/2007/dsa-1393  View
277636 27127 CVE-2007-3770 GENTOO:GLSA-200708-07  View
277637 27127 CVE-2007-3770 URL:http://security.gentoo.org/glsa/glsa-200708-07.xml  View
277638 27127 CVE-2007-3770 UBUNTU:USN-497-1  View
277639 27127 CVE-2007-3770 URL:http://www.ubuntu.com/usn/usn-497-1  View
277640 27127 CVE-2007-3770 BID:24889  View
277641 27127 CVE-2007-3770 URL:http://www.securityfocus.com/bid/24889  View
277642 27127 CVE-2007-3770 OSVDB:38082  View
277643 27127 CVE-2007-3770 URL:http://osvdb.org/38082  View
277644 27127 CVE-2007-3770 SECUNIA:26037  View
277645 27127 CVE-2007-3770 URL:http://secunia.com/advisories/26037  View
277646 27127 CVE-2007-3770 SECUNIA:26418  View
277647 27127 CVE-2007-3770 URL:http://secunia.com/advisories/26418  View
277648 27127 CVE-2007-3770 SECUNIA:26392  View
277649 27127 CVE-2007-3770 URL:http://secunia.com/advisories/26392  View
277650 27127 CVE-2007-3770 SECUNIA:27374  View
277651 27127 CVE-2007-3770 URL:http://secunia.com/advisories/27374  View
277652 27127 CVE-2007-3770 XF:xfce-terminalhelper-command-execution(35379)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57166 JVNDB-2007-005858 PsNews の news/show.php におけるディレクトリトラバーサルの脆弱性 PsNews の news/show.php には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2007-3772 27127 6.4 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005858.html  View