Xdg-utils 1.0.2 and earlier allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a URL argument to (1) xdg-open or (2) xdg-email.

The remote Solaris system is missing necessary patches to address security updates :

  - Xdg-utils 1.0.2 and earlier allows user-assisted remote     attackers to execute arbitrary commands via shell     metacharacters in a URL argument to (1) xdg-open or (2)     xdg-email. (CVE-2008-0386)

A vulnerability was found in xdg-open and xdg-email commands, which allows remote attackers to execute arbitrary commands if the user is tricked into trying to open a maliciously crafted URL.

The updated packages have been patched to prevent the issue.

New xdg-utils packages are available for Slackware 12.2 and -current to fix security issues. Applications that use /etc/mailcap could be tricked into running an arbitrary script through xdg-open, and a separate flaw in xdg-open could allow the execution of arbitrary commands embedded in untrusted input provided to xdg-open.

xdg-open and xdg-email didn't properly check their arguments.
Therefore e.g. URLs passed to those programs could contain shell code that got executed (CVE-2008-0386).

The remote host is affected by the vulnerability described in GLSA-200801-21 (Xdg-Utils: Arbitrary command execution)

    Miroslav Lichvar discovered that the 'xdg-open' and 'xdg-email' shell     scripts do not properly sanitize their input before processing it.
  Impact :

    A remote attacker could entice a user to open a specially crafted link     with a vulnerable application using Xdg-Utils (e.g. an email client),     resulting in the execution of arbitrary code with the privileges of the     user running the application.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
80817	Oracle Solaris Third-Party Patch Update : xdg-utils (cve_2008_0386_improper_input)	Nessus	Solaris Local Security Checks	medium
36549	Mandriva Linux Security Advisory : xdg-utils (MDVSA-2008:031)	Nessus	Mandriva Local Security Checks	medium
35577	Slackware 12.2 / current : xdg-utils (SSA:2009-033-01)	Nessus	Slackware Local Security Checks	medium
31115	openSUSE 10 Security Update : xdg-utils (xdg-utils-4983)	Nessus	SuSE Local Security Checks	medium
30138	GLSA-200801-21 : Xdg-Utils: Arbitrary command execution	Nessus	Gentoo Local Security Checks	medium

Detections

Analytics

CVE-2008-0386

critical

Tenable Plugins

medium

medium

medium

medium

medium