CVE-2003-0069: Undefined Security Weakness

The PuTTY terminal emulator 0.53 allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute...

CVE-2004-0453

Format string vulnerability in the monitor "memory dump" command in VICE 1.6 to 1.14 allows local users to cause a denial of service emulator crash and possibly execute arbitrary code via format string specifiers in an output string...

CVE-2004-0453

Format string vulnerability in the monitor "memory dump" command in VICE 1.6 to 1.14 allows local users to cause a denial of service emulator crash and possibly execute arbitrary code via format string specifiers in an output string...

DEBIAN-CVE-2004-0453

Format string vulnerability in the monitor "memory dump" command in VICE 1.6 to 1.14 allows local users to cause a denial of service emulator crash and possibly execute arbitrary code via format string specifiers in an output string...

Solaris 8 (x86) : 109155-01

SunOS 5.8x86: vgatext and terminal-emulator patch. Date this patch was last updated by Sun : Apr/05/00 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc';...

RHEL 2.1 : hanterm-xf (RHSA-2003:071)

Updated Hangul Terminal packages fix two security issues. Hangul Terminal is a terminal emulator for the X Window System, based on Xterm. Hangul Terminal provides an escape sequence for reporting the current window title, which essentially takes the current title and places it directly on the...

RHEL 2.1 : kon2 (RHSA-2003:050)

A buffer overflow in kon2 allows local users to obtain root privileges. KON is a Kanji emulator for the console. There is a buffer overflow vulnerability in the command line parsing code portion of the kon program up to and including version 0.3.9b. This vulnerability, if appropriately exploited,...

RHEL 2.1 : rxvt (RHSA-2003:055)

Updated rxvt packages are available which fix a number of vulnerabilities in the handling of escape sequences. Updated 12 March 2003 Added packages for Red Hat Enterprise Linux ES and Red Hat Enterprise Linux WS Rxvt is a color VT102 terminal emulator for the X Window System. A number of issues...

CVE-2004-0453

Format string vulnerability in the monitor "memory dump" command in VICE 1.6 to 1.14 allows local users to cause a denial of service emulator crash and possibly execute arbitrary code via format string specifiers in an output string...

CVE-2004-0453

CVE-2004-0453 describes a format string vulnerability in the monitor “memory dump” command of VICE versions 1.6 through 1.14. The issue arises from format string specifiers in an output string, allowing local users to cause a denial of service (emulator crash) and potentially execute arbitrary co...

CVE-2004-0453

Format string vulnerability in the monitor "memory dump" command in VICE 1.6 to 1.14 allows local users to cause a denial of service emulator crash and possibly execute arbitrary code via format string specifiers in an output string...

[SECURITY] [DSA 496-1] New eterm packages fix indirect arbitrary command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 496-1 [email protected] http://www.debian.org/security/ Martin Schulze April 29th, 2004 http://www.debian.org/security/faq -...

DSA-496 eterm - missing input sanitising

Bulletin has no description...

CVE-2003-0630

Multiple buffer overflows in the atari800.svgalib setuid program of the Atari 800 emulator atari800 before 1.2.2 allow local users to gain privileges via long command line arguments, as demonstrated with the -osarom argument...

CVE-2003-0630

Multiple buffer overflows in the atari800.svgalib setuid program of the Atari 800 emulator atari800 before 1.2.2 allow local users to gain privileges via long command line arguments, as demonstrated with the -osarom argument...

DEBIAN-CVE-2003-0630

Multiple buffer overflows in the atari800.svgalib setuid program of the Atari 800 emulator atari800 before 1.2.2 allow local users to gain privileges via long command line arguments, as demonstrated with the -osarom argument...

CVE-2003-0630

Multiple buffer overflows in the atari800.svgalib setuid program of the Atari 800 emulator atari800 before 1.2.2 allow local users to gain privileges via long command line arguments, as demonstrated with the -osarom argument...

CVE-2003-0630

Multiple buffer overflows in the atari800.svgalib setuid program of the Atari 800 emulator atari800 before 1.2.2 allow local users to gain privileges via long command line arguments, as demonstrated with the -osarom argument...

SynAtari800.pl

!perl PoC By OpTiKoOl, for Atari 800 Emulator, Version 1.3.0 based on http://www.securityfocus.com/archive/1/331518/2003-08-01/2003-08-07/0 - This PoC exploits a bof in parsing a very long config file 250 bytes As in the advisory there's other bofs. but i just researched this one to make a...

[SECURITY] [DSA-359-1] New atari800 packages fix buffer overflows

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 359-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 31st, 2003 http://www.debian.org/security/faq -...