CVE-2008-0386

Description

Xdg-utils 1.0.2 and earlier allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a URL argument to (1) xdg-open or (2) xdg-email.

Weakness classification

• CWE-20: Improper Input Validation

Primary references

• cve@mitre.org — Exploit
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Vendor Advisory
• cve@mitre.org — Vendor Advisory
• cve@mitre.org — URL Repurposed
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Exploit
• cve@mitre.org — Exploit
• cve@mitre.org — Exploit
• cve@mitre.org — Exploit
• cve@mitre.org — Exploit
• cve@mitre.org — Broken Link