Description
The x-man-page: URI handler for Apple Terminal 1.4.4 in Mac OS X 10.3.9 does not cleanse terminal escape sequences, which allows remote attackers to execute arbitrary commands.
References
- http://remahl.se/david/vuln/011/
- 13480 vdb-entry
- TA05-136A third-party-advisory
- 16084 vdb-entry
- 15227 third-party-advisory
- VU#356070 third-party-advisory
- ADV-2005-0455 vdb-entry
- APPLE-SA-2005-05-03 vendor-advisory