Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

Gentoo: GLSA-200801-21 Normal: Xdg-Utils Remote Execution Advisory

gentoo
Calendar Grey January 31, 2008
Scroller Gentoo
A flaw in Xdg-Utils permits remote command execution. Please update to the newest version for security.
A vulnerability has been discovered in Xdg-Utils, allowing for the remote execution of arbitrary commands.

Summary

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gentoo Linux Security Advisory                           GLSA 200801-21
                                            https://security.gentoo.org/

  Severity: Normal
     Title: Xdg-Utils: Arbitrary command execution
      Date: January 30, 2008
      Bugs: #207331
        ID: 200801-21


Synopsis
=======
A vulnerability has been discovered in Xdg-Utils, allowing for the
remote execution of arbitrary commands.

Background
=========
Xdg-Utils is a set of tools allowing all applications to easily
integrate with the Free Desktop configuration.

Affected packages
================
    -------------------------------------------------------------------
     Package             /  Vulnerable  /                   Unaffected
    -------------------------------------------------------------------
  1  x11-misc/xdg-utils     < 1.0.2-r1                     >= 1.0.2-r1

==========
Miroslav Lichvar discovered that the "xdg-open" and "xdg-email" shell
scripts...
Read the Full Advisory
Topics%20covered

Topics Covered

security advisory gentoo command execution security fix remote execution normal severity xdg-utils

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory gentoo command execution security fix remote execution normal severity xdg-utils

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround