Lucene search

K
freebsdFreeBSDD5E1AAC8-DB0B-11DD-AE30-001CC0377035
HistoryDec 28, 2008 - 12:00 a.m.

xterm -- DECRQSS remote command execution vulnerability

2008-12-2800:00:00
vuxml.freebsd.org
24

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.013 Low

EPSS

Percentile

85.8%

SecurityFocus reports:

The xterm program is prone to a remote command-execution
vulnerability because it fails to sufficiently validate user
input.
Successfully exploiting this issue would allow an attacker
to execute arbitrary commands on an affected computer in the
context of the affected application.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchxterm< 238UNKNOWN

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.013 Low

EPSS

Percentile

85.8%