CVE-2008-0386 Xdg-utils 1.0.2 and earlier allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a URL argument to (1) xdg-open or (2) xdg-email.
MediumCVSS 6.8
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Xdg-utils 1.0.2 and earlier allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a URL argument to (1) xdg-open or (2) xdg-email.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gentoo xdg-utils | <= 1.0.2 | No fix listed |
References
- bugs.gentoo.org exploit
- SUSE-SR:2008:004 third-party-advisory vendor-advisory
- 28638 third-party-advisory vendor-advisory
- 28728 third-party-advisory vendor-advisory
- 29048 third-party-advisory url-repurposed
- GLSA-200801-21 third-party-advisory vendor-advisory
- webcvs.freedesktop.org exploit
- webcvs.freedesktop.org exploit
- webcvs.freedesktop.org exploit
- webcvs.freedesktop.org exploit
- webcvs.freedesktop.org exploit
- webcvs.freedesktop.org broken-link
- MDVSA-2008:031 third-party-advisory vendor-advisory
- 27528 third-party-advisory vdb-entry
- 1019284 third-party-advisory vdb-entry
- ADV-2008-0342 third-party-advisory vdb-entry
- bugzilla.redhat.com issue-tracking
- Debian Security Tracker CVE-2008-0386 vendor-advisory