CVE-2015-0853

Published: Sep 6, 2017Modified: May 13, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

svn-workbench 1.6.2 and earlier on a system with xeyes installed allows local users to execute arbitrary commands by using the "Command Shell" menu item while in the directory trunk/$(xeyes).

Affected (1)

Products: Pysvn Project: Svn Workbench

Pysvn Project

1 product

Svn Workbench

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Pysvn Project Svn Workbench	Up to 1.6.2

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (10)

http://pysvn.tigris.org/issues/show_bug.cgi?id=202

Source: security@debian.org

ExploitVendor Advisory

http://www.openwall.com/lists/oss-security/2015/09/13/3

Source: security@debian.org

ExploitMailing ListThird Party Advisory

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=798863

Source: security@debian.org

ExploitIssue TrackingThird Party AdvisoryVDB Entry

https://bugs.launchpad.net/ubuntu/+source/svn-workbench/+bug/1495268

Source: security@debian.org

Issue TrackingThird Party AdvisoryVDB Entry

https://bugzilla.redhat.com/show_bug.cgi?id=1262928

Source: security@debian.org

Issue TrackingThird Party AdvisoryVDB Entry

http://pysvn.tigris.org/issues/show_bug.cgi?id=202