NEC Aterm WG300HP Cross-Site Request Forgery Vulnerability

The NEC Aterm WG300HP is a wireless router product from Nippon Electric NEC. A cross-site request forgery vulnerability exists in the NEC Aterm WG300HP. An attacker can exploit this vulnerability to perform an unauthorized operation by tricking a logged in user into browsing a malicious web page...

NEC Aterm WF800HP Cross-Site Request Forgery Vulnerability

The NEC Aterm WF800HP is a wireless router product from Nippon Electric NEC. A cross-site request forgery vulnerability exists in the NEC Aterm WF800HP using firmware Ver1.0.17 and earlier. An attacker can exploit this vulnerability to perform an unauthorized operation by tricking a logged-in use...

Aterm WF800HP vulnerable to cross-site request forgery

Overview Aterm WF800HP provided by NEC Corporation contains a cross-site request forgery vulnerability CWE-352. Satoshi Ogawa of Mitsui Bussan Secure Directions,Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership...

Aterm WG300HP vulnerable to cross-site request forgery

Overview Aterm WG300HP provided by NEC Corporation contains a cross-site request forgery vulnerability CWE-352. Toshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

JVN#82020528: Aterm WG300HP vulnerable to cross-site request forgery

Aterm WG300HP provided by NEC Corporation contains a cross-site request forgery vulnerability CWE-352. Impact If a user views a malicious page while logged in, unintended operations may be performed. Solution Apply a Workaround The following workaround may mitigate the affects of this...

JVN#07818796: Aterm WF800HP vulnerable to cross-site request forgery

Aterm WF800HP provided by NEC Corporation contains a cross-site request forgery vulnerability CWE-352. Impact If a user views a malicious page while logged in, unintended operations may be performed. Solution Update the Firmware Update to the latest firmware version according to the information...

Vulnerabilities of the Gentoo Linux operating system, which allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the aterm package of the Gentoo Linux operating system up to version 1.0.1-r1 can lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited locally...

Gentoo Security Advisory GLSA 200805-03 (aterm eterm rxvt mrxvt multi-aterm wterm rxvt-unicode)

The remote host is missing updates announced in advisory GLSA 200805-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200805-03 (aterm eterm rxvt mrxvt multi-aterm wterm rxvt-unicode)

The remote host is missing updates announced in advisory GLSA 200805-03. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLSA-200805-03 : Multiple X11 terminals: Local privilege escalation

The remote host is affected by the vulnerability described in GLSA-200805-03 Multiple X11 terminals: Local privilege escalation Bernhard R. Link discovered that RXVT opens a terminal on :0 if the '-display' option is not specified and the DISPLAY environment variable is not set. Further research ...

[ GLSA 200805-03 ] Multiple X11 terminals: Local privilege escalation

Gentoo Linux Security Advisory GLSA 200805-03 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

CVE-2008-1142

rxvt 2.6.4 opens a terminal window on :0 if the DISPLAY environment variable is not set, which might allow local users to hijack X11 connections. NOTE: it was later reported that rxvt-unicode, mrxvt, aterm, multi-aterm, and wterm are also affected. NOTE: realistic attack scenarios require that th...

CVE-2003-0024

The menuBar feature in aterm 0.42 allows attackers to modify menu options and execute arbitrary commands via a certain character escape sequence that inserts the commands into the menu...

CVE-2003-0067

The aterm terminal emulator 0.42 allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute...

CVE-2003-0067

CVE-2003-0067 affects the aterm terminal emulator (version 0.42). The vulnerability stems from a window-title escape sequence feature that can be manipulated to place a crafted title on the command line, enabling an attacker to inject and execute arbitrary commands when the user views a file cont...

CVE-2003-0024

The CVE-2003-0024 entry concerns the terminal emulator aterm 0.42, where the menuBar feature can be abused by attackers who display data to the terminal to modify menu entries and trigger arbitrary command execution via a crafted character escape sequence that inserts commands into the menu. The ...

CVE-2003-0067

The aterm terminal emulator 0.42 allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute...

CVE-2003-0024

The menuBar feature in aterm 0.42 allows attackers to modify menu options and execute arbitrary commands via a certain character escape sequence that inserts the commands into the menu...