CVE-2002-1795

Cross-site scripting XSS vulnerability in connect.asp in Microsoft Terminal Services Advanced Client TSAC ActiveX control allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2002-1898

Terminal 1.3 in Apple Mac OS X 10.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a telnet:// link, which is executed by Terminal.app window...

CVE-2002-1933

The terminal services screensaver for Microsoft Windows 2000 does not automatically lock the terminal window if the window is minimized, which could allow local users to gain access to the terminal server window...

PT-2002-2620 · Apple · Terminal

Name of the Vulnerable Software and Affected Versions: Terminal versions 1.3 Description: The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a "telnet://" link, which is executed by Terminal.app window. This can lead to unauthorized access and execution of...

CVE-2002-0726

Buffer overflow in Microsoft Terminal Services Advanced Client TSAC ActiveX control allows remote attackers to execute arbitrary code via a long server name field...

Apple Mac OSX 10.2 - Terminal.APP Telnet Link Command Execution

Apple Mac OSX 10.2 - Terminal.APP Telnet Link Command Execution source: https://www.securityfocus.com/bid/5768/info Mac OS X is the BSD-based operating system distributed and maintained by Apple. It has been discovered that some types of links, when clicked on, may result in the execution of...

Apple Mac OSX 10.2 - Terminal.APP Telnet Link Command Execution

source: https://www.securityfocus.com/bid/5768/info Mac OS X is the BSD-based operating system distributed and maintained by Apple. It has been discovered that some types of links, when clicked on, may result in the execution of arbitrary commands. Due to the improper handling of some links, a us...

xtelw Detection

The remote host is running xteld, a Minitel emulator, in HyperTerminal mode. This service allows users to connect to the Teletel network. Some of the servers are expensive. Note that by default, xteld forbids access to the most expensive services. C Tenable Network Security, Inc...

Microsoft Terminal Server Client Buffer Overrun (A082802-1)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: Microsoft Terminal Server Client Buffer Overrun Release Date: 08/28/2002 Application: Microsoft Terminal Server ActiveX Client v5.02221.1 Platform: Windows 95/98/NT 4.0/2000/XP Severity:...

Crashing any Windows NT TSE running MetaFrame 1.8

PreScriptum: I posted this at thin-world.community.everyone.net first. -------------------------------------------------------------------------------- I tried to contact Citrix about this bug i found, but they warn't interested. Haven't heared from them. So i'm posting it on a public forum for...

CVE-2002-0444

Microsoft Windows 2000 running the Terminal Server 90-day trial version, and possibly other versions, does not apply group policies to incoming users when the number of connections to the SYSVOL share exceeds the maximum, e.g. with a maximum number of licenses, which can allow remote authenticate...

EUVD-2001-0843

Terminal Services Manager MMC in Windows 2000 and XP trusts the Client Address IP address that is provided by the client instead of obtaining it from the packet headers, which allows clients to spoof their public IP address, e.g. through a Network Address Translation NAT...

CVE-2001-0444

CVE-2001-0444 affects Cisco CBOS 2.3.0.053. The vulnerability arises because the router’s output of the show nat (sh nat) command is echoed to the terminal of the next user who connects via Telnet, potentially allowing that user to view sensitive information. The documented impact is partial conf...

CVE-2001-0540

CVE-2001-0540: Memory leak in Windows NT/2000 Terminal Server processing of malformed RDP requests to port 3389 leads to memory exhaustion and DoS. Affected: Windows NT/2000 Terminal Services. Root cause: memory handling during RDP request processing. Remediation: Microsoft Security Bulletin MS01...

CVE-2001-0860

The CVE-2001-0860 entry documents a vulnerability in Terminal Services Manager MMC on Windows 2000 and Windows XP where the service trusts the Client Address (IP) provided by the client instead of deriving it from packet headers. This enables IP address spoofing (e.g., via NAT). Root cause: the t...

CVE-2001-0540

Memory leak in Terminal servers in Windows NT and Windows 2000 allows remote attackers to cause a denial of service memory exhaustion via a large number of malformed Remote Desktop Protocol RDP requests to port 3389...

CVE-2001-0860

Terminal Services Manager MMC in Windows 2000 and XP trusts the Client Address IP address that is provided by the client instead of obtaining it from the packet headers, which allows clients to spoof their public IP address, e.g. through a Network Address Translation NAT...

CVE-2001-0540: Undefined Security Weakness

Memory leak in Terminal servers in Windows NT and Windows 2000 allows remote attackers to cause a denial of service memory exhaustion via a large number of malformed Remote Desktop Protocol RDP requests to port 3389...

CVE-1999-1139: Undefined Security Weakness

Character-Terminal User Environment CUE in HP-UX 11.0 and earlier allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the IOERROR.mytty file...

CVE-2001-0663: Undefined Security Weakness

Terminal Server in Windows NT and Windows 2000 allows remote attackers to cause a denial of service via a sequence of invalid Remote Desktop Protocol RDP packets...