CRLF injection vulnerability in fvwm-menu-directory for fvwm 2.5.x before 2.5.10 and 2.4.x before 2.4.18 allows local users to execute arbitrary commands via carriage returns in a filename.
Max CVSS
4.6
EPSS Score
0.05%
Published
2003-12-31
Updated
2008-09-05
CRLF injection vulnerability in the evalFolderLine function in fvwm 2.5.18 and earlier allows local users to execute arbitrary commands via carriage returns in a directory name, which is not properly handled by fvwm-menu-directory, a variant of CVE-2003-1308.
Max CVSS
4.6
EPSS Score
0.06%
Published
2006-11-17
Updated
2017-07-20
2 vulnerabilities found