CVE-2010-2713

{"id": "CVE-2010-2713", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2010-08-05T18:17:57.620", "references": [{"url": "http://git.gnome.org/browse/vte/commit/?id=8b971a7b2c59902914ecbbc3915c45dd21530a91", "tags": ["Exploit", "Patch"], "source": "security@ubuntu.com"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html", "source": "security@ubuntu.com"}, {"url": "http://secunia.com/advisories/40635", "tags": ["Vendor Advisory"], "source": "security@ubuntu.com"}, {"url": "http://www.securityfocus.com/bid/41716", "source": "security@ubuntu.com"}, {"url": "http://www.ubuntu.com/usn/usn-962-1", "source": "security@ubuntu.com"}, {"url": "http://www.vupen.com/english/advisories/2010/1839", "tags": ["Vendor Advisory"], "source": "security@ubuntu.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=613110", "source": "security@ubuntu.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "The vte_sequence_handler_window_manipulation function in vteseq.c in libvte (aka libvte9) in VTE 0.25.1 and earlier, as used in gnome-terminal, does not properly handle escape sequences, which allows remote attackers to execute arbitrary commands or obtain potentially sensitive information via a (1) window title or (2) icon title sequence. NOTE: this issue exists because of a CVE-2003-0070 regression."}, {"lang": "es", "value": "La funci\u00f3n vte_sequence_handler_window_manipulation en vteseq.c en libvte (conocido como libvte9) de VTE v0.25.1 y anteriores, tal como se utiliza en gnome-terminal, no gestiona adecuadamente las secuencias de escape, lo cual permite a atacantes remotos ejecutar comandos a su elecci\u00f3n u obtener informaci\u00f3n potencialmente sensible a trav\u00e9s de un (1) titulo de ventana o (2) icono de secuencia del t\u00edtulo. NOTA: esta vulnerabilidad est\u00e1 provocada por una regresi\u00f3n del CVE-2003-0070."}], "lastModified": "2010-09-09T05:43:12.210", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nalin_dahyabhai:vte:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "84F24044-0FF3-4079-B70B-13660D4D56DF", "versionEndIncluding": "0.25.1"}, {"criteria": "cpe:2.3:a:nalin_dahyabhai:vte:0.11.21:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E0CBB9AD-5118-4484-A265-6DF819C111B2"}, {"criteria": "cpe:2.3:a:nalin_dahyabhai:vte:0.12.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BE63886D-928A-4F30-8547-20B19D406EA3"}, {"criteria": "cpe:2.3:a:nalin_dahyabhai:vte:0.14.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D1BC4612-2ACB-4087-A349-8E26AF1A3BF7"}, {"criteria": "cpe:2.3:a:nalin_dahyabhai:vte:0.15.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7500A708-B2DB-49A8-823D-5632ECA92205"}, {"criteria": "cpe:2.3:a:nalin_dahyabhai:vte:0.16.14:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C134DA96-4F89-47EA-9655-9D68FC5D86F1"}, {"criteria": "cpe:2.3:a:nalin_dahyabhai:vte:0.17.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "80AD28D1-5CA8-446A-9D71-7051332DF9AF"}, {"criteria": "cpe:2.3:a:nalin_dahyabhai:vte:0.20.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1052E372-C3E9-4CF4-80AC-ED116CF37F94"}, {"criteria": "cpe:2.3:a:nalin_dahyabhai:vte:0.22.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7F3171C1-7888-43FC-A618-221F2B5D1174"}, {"criteria": "cpe:2.3:a:nalin_dahyabhai:vte:0.24.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "66A6A608-AD4B-499F-BFE6-AD8DA79BE29F"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:gnome:gnome-terminal:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F8D14F75-660E-4ECC-8F69-6E24CA6F6930"}], "operator": "OR"}], "operator": "AND"}], "evaluatorComment": "Per: http://cwe.mitre.org/data/definitions/77.html\r\n\r\n'CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')'", "sourceIdentifier": "security@ubuntu.com"}