Hafiye 1.0 Terminal Escape Sequence Injection Vulnerability

+------- Software --------------+ Hafiye 1.0 "POSIX-compliant, customizable TCP/IP packet sniffer." +------- Tested Versions --------------+ Hafiye1.0 Tested on:LinuxHafiye compiled from tarball FreeBSD 4.7 Installed from CD +------- Vulnerability --------------+ Packet Payload Terminal Escape...

Hafiye 1.0 Remote Terminal Escape Sequence Injection Vulnerability

No description provided by source. / Remote Exploit for Hafiye-1.0 Terminal Escape Sequence Injection Vulnerability Written by Serkan Akpolat Homepage: http://deicide.siyahsapka.org E-mail: deicide siyahsapka org Greets: Virulent, gorny and all other netricians / include stdio.h include sys/types...

hafiye.txt

+------- Software --------------+ Hafiye 1.0 "POSIX-compliant, customizable TCP/IP packet sniffer." +------- Tested Versions --------------+ Hafiye1.0 Tested on:LinuxHafiye compiled from tarball FreeBSD 4.7 Installed from CD +------- Vulnerability --------------+ Packet Payload Terminal Escape...

hafiye -- lack of terminal escape sequence filtering

A siyahsapka.org advisory reads: Hafiye-1.0 doesnt filter the payload when printing it to the terminal. A malicious attacker can send packets with escape sequence payloads to exploit this vulnerability. If Hafiye has been started with -n packet count option , the vulnerability could allow remote...

Windows RDP / Terminal Services Detection (deprecated)

Binary data 1153.prm...

Terminal Services Web Detection

Binary data 2508.prm...

Mandrake Linux Security Advisory : rxvt (MDKSA-2003:034)

Digital Defense Inc. released a paper detailing insecurities in various terminal emulators, including rxvt. Many of the features supported by these programs can be abused when untrusted data is displayed on the screen. This abuse can be anything from garbage data being displayed to the screen or ...

Mandrake Linux Security Advisory : apache2 (MDKSA-2003:050)

A memory leak was discovered in Apache 2.0 through 2.0.44 that can allow a remote attacker to cause a significant denial of service DoS by sending requests containing a lot of linefeed characters to the server. As well, Apache does not filter terminal escape sequences from its log files, which...

CVE-2004-0680

The CVE concerns the Zoom X3 ADSL modem: a terminal on port 254 can be accessed using the default HTML management password even if the HTTP interface password was changed, potentially granting remote attackers unauthorized access. No exploitation details are provided in the connected documents.

Solaris 8 (x86) : 109155-01

SunOS 5.8x86: vgatext and terminal-emulator patch. Date this patch was last updated by Sun : Apr/05/00 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc';...

Mac OS X Multiple Vulnerabilities (Security Update 2004-05-24)

The remote host is missing Security Update 2004-05-24. This security update includes fixes for the following components : HelpViewer Terminal This update fixes security issues that could allow an attacker to execute arbitrary commands on the remote host by exploiting a flaw in Safari and the...

RHEL 2.1 : hanterm-xf (RHSA-2003:071)

Updated Hangul Terminal packages fix two security issues. Hangul Terminal is a terminal emulator for the X Window System, based on Xterm. Hangul Terminal provides an escape sequence for reporting the current window title, which essentially takes the current title and places it directly on the...

Mac OS X Terminal Application Unspecified Issue (Security Update 2003-11-04)

The remote host is missing Mac OS X Security Update 2003-11-04. This update fixes a flaw in the Terminal application that may allow a rogue web site to access the web cookies of the user of the remote host. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include"compat.inc";...

RHEL 2.1 : rxvt (RHSA-2003:055)

Updated rxvt packages are available which fix a number of vulnerabilities in the handling of escape sequences. Updated 12 March 2003 Added packages for Red Hat Enterprise Linux ES and Red Hat Enterprise Linux WS Rxvt is a color VT102 terminal emulator for the X Window System. A number of issues...

security flaw

/proc/tty/driver/serial in Linux 2.4.x reveals the exact number of characters used in serial links, which could allow local users to obtain potentially sensitive information such as the length of passwords...

Microsoft Windows Terminal Server Patch Unspecified Denial Of Service Vulnerability

Description The Terminal Server patch issued in Microsoft advisory MS01-052 has been found to be prone to an unspecified denial of service vulnerability. The affected patch was originally issued to deal with the issue outlined in the Microsoft Windows 2000/NT Terminal Server Service RDP DoS...

Terminal Services Web Detection

The remote host appears to be configured to facilitate the client download of an ActiveX Terminal Services Client. So, users can access the web page and click a 'connect' button which will prompt a client-side download of a .cab file which will be used to connect the client directly to a terminal...

DSA-496 eterm - missing input sanitising

Bulletin has no description...

DSA-472 fte - several vulnerabilities

Bulletin has no description...

Kroum Grigorov KpyM Telnet Server 1.0 - Remote Denial of Service

Kroum Grigorov KpyM Telnet Server 1.0 - Remote Denial of Service // source: https://www.securityfocus.com/bid/9379/info KpyM Telnet Server has been reported to be prone to a remote denial of service vulnerability. Due to a lack of resource limitations, a remote attacker may negotiate multiple...