4955 matches found
PuTTY window title escape character arbitrary command execution
PuTTY is a free SSH client. This version contains a flaw that may allow a malicious user to insert arbitrary commands and execute them. The issue is triggered when an attacker sends commands, preceded by terminal emulator escape sequences. It is possible that the flaw may allow arbitrary code...
Microsoft RDP flaws could allow sniffing and DOS(Q324380)
Remote Data Protocol RDP version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext session data, which could allow a remote attacker to determine the contents of encrypted sessions via sniffing, and Remote Data Protocol RDP version 5.1 in Windows ...
Apache Error Log Escape Sequence Injection
The target is running an Apache web server which allows for the injection of arbitrary escape sequences into its error logs. An attacker might use this vulnerability in an attempt to exploit similar vulnerabilities in terminal emulators. OpenVAS has determined the vulnerability exists only by...
Nortel/Bay Networks/Xylogics Annex Default Password (Telnet)
The remote terminal server has the default password set. SPDX-FileCopyrightText: 2003 Douglas Minderhout Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Service Detection (3 ASCII digit codes like FTP, SMTP, NNTP...)
This plugin performs service detection. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.14773";...
CVE-2005-3257
The VT implementation vtioctl.c in Linux kernel 2.6.12, and possibly other versions including 2.6.14.4, allows local users to use the KDSKBSENT ioctl on terminals of other users and gain privileges, as demonstrated by modifying key bindings using loadkeys...
CVE-2005-3176
Microsoft Windows 2000 before Update Rollup 1 for SP4 does not record the IP address of a Windows Terminal Services client in a security log event if the client connects successfully, which could make it easier for attackers to escape detection...
CVE-2005-3176
CVE-2005-3176: Affects Microsoft Windows 2000 (before Update Rollup 1 for SP4). The issue is that the IP address of a Windows Terminal Services client is not recorded in a security log event when the client connects successfully, which could help an attacker evade detection. Connected documents c...
The use of TCP hidden channels to bypass the firewall-vulnerability warning-the black bar safety net
From:http://www. oioj. net/ my home ISP a free personal home page service, in the days that followed, I often passed 3 3 8 9 Port to log in, constantly to the IT patch patch the vulnerability, do some management and maintenance, own also grow a lot of knowledge. Recently delving intonetworksecuri...
Critical: Red Hat Security Advisory: elm security update
An updated elm package is now available that fixes a buffer overflow issue for Red Hat Enterprise Linux 2.1 AS and AW. This update has been rated as having critical security impact by the Red Hat Security Response Team. Elm is a terminal mode email client. A buffer overflow flaw in Elm was...
CVE-2005-2511
Unknown vulnerability in Mac OS X 10.4.2 and earlier, when using Kerberos authentication with LDAP, allows attackers to gain access to a root Terminal window...
CVE-2005-2511
CVE-2005-2511 affects Mac OS X 10.4.2 and earlier. The issue is described as an unknown vulnerability where, when using Kerberos authentication with LDAP, an attacker could gain access to a root Terminal window. The available documents do not specify an exact root cause, vulnerable component, aff...
CVE-2001-1555
CVE-2001-1555 affects Solaris 8 via the pt_chmod path where logout does not call fdetach to reset terminal privileges, enabling local users to modify a TTY ACL and write to other users’ terminals. The available sources describe the vulnerable component and root cause but do not provide explicit p...
CVE-2001-1571
The CVE-2001-1571 entry concerns the Windows XP Remote Desktop client, where the Remote Desktop user name is sent in cleartext. This behavior could allow an attacker to sniff and obtain terminal server user account names over the network. The connected Red Hat and CVE references reiterate the sam...
CVE-2001-1555
ptchmod in Solaris 8 does not call fdetach to reset terminal privileges when users log out of terminals, which allows local users to write to other users' terminals by modifying the ACL of a TTY...
FreeBSD : multi-gnome-terminal (2282)
The following package needs to be updated: multi-gnome-terminal %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-2006 Jacques Vidrine and contributors Redistribution and use in source VuXML and 'compiled' forms SGML, HTML,...
[SECURITY] [DSA 733-1] New crip packages fix insecure temporary files
-------------------------------------------------------------------------- Debian Security Advisory DSA 733-1 [email protected] http://www.debian.org/security/ Martin Schulze June 30th, 2005 http://www.debian.org/security/faq -...
CVE-2002-1933
The terminal services screensaver for Microsoft Windows 2000 does not automatically lock the terminal window if the window is minimized, which could allow local users to gain access to the terminal server window...
CVE-2002-1933
The CVE-2002-1933 issue affects Microsoft Windows 2000 Terminal Services: the terminal services screensaver does not automatically lock the terminal window when the window is minimized, potentially allowing local users to gain access to the terminal server window. The connected documents confirm ...
CVE-2002-1795
Cross-site scripting XSS vulnerability in connect.asp in Microsoft Terminal Services Advanced Client TSAC ActiveX control allows remote attackers to inject arbitrary web script or HTML via unknown vectors...