ByteOS Network

NVD Vulnerability Details :

CVE-2015-1877

Analyzed

Source-security@debian.org

Published At-02 Jun, 2021 | 17:15

Updated At-14 Jun, 2021 | 14:01

The open_generic_xdg_mime function in xdg-open in xdg-utils 1.1.0 rc1 in Debian, when using dash, does not properly handle local variables, which allows remote attackers to execute arbitrary commands via a crafted file.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary	2.0	6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P

CPE Matches

freedesktop.org

>>xdg-utils>>1.1.0

cpe:2.3:a:freedesktop:xdg-utils:1.1.0:rc1:*:*:*:*:*:*

Debian GNU/Linux

>>debian_linux>>7.0

cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

Debian GNU/Linux

>>debian_linux>>8.0

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-77	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.debian.org/security/2015/dsa-3165	security@debian.org	Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/02/18/7	security@debian.org	Mailing List Patch Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/02/18/9	security@debian.org	Mailing List Patch Third Party Advisory
http://www.securityfocus.com/bid/72675	security@debian.org	Third Party Advisory VDB Entry
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=777722	security@debian.org	Issue Tracking Mailing List Patch Third Party Advisory
https://bugs.freedesktop.org/show_bug.cgi?id=89129	security@debian.org	Issue Tracking Third Party Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History