openSUSE Security Update : vte (openSUSE-SU-2010:0404-1)

VTE was vulnerable to an old title set+query attack which could be used by remote attackers to execute arbitrary code CVE-2010-2713. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update vte-2729. T...

FreeBSD : vte -- Classic terminal title set+query attack (9a8fecef-92c0-11df-b140-0015f2db7bde)

Kees Cook reports : Janne Snabb discovered that applications using VTE, such as gnome-terminal, did not correctly filter window and icon title request escape codes. If a user were tricked into viewing specially crafted output in their terminal, a remote attacker could execute arbitrary commands...

Ubuntu 9.04 / 9.10 / 10.04 LTS : vte vulnerability (USN-962-1)

Janne Snabb discovered that applications using VTE, such as gnome-terminal, did not correctly filter window and icon title request escape codes. If a user were tricked into viewing specially crafted output in their terminal, a remote attacker could execute arbitrary commands with user privileges...

[USN-962-1] VTE vulnerability

=========================================================== Ubuntu Security Notice USN-962-1 July 15, 2010 vte vulnerability CVE-2010-2713 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 9.04 Ubuntu 9.10 Ubuntu 10.04 LTS...

Ubuntu Update for vte vulnerability USN-962-1

Ubuntu Update for Linux kernel vulnerabilities USN-962-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9621.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for vte vulnerability USN-962-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.n...

VTE control characters vulnerability

Control characters are not checked when setting window or icon title, making it possible to insert terminal ESC-sequences...

Fedora Update for gnome-sharp FEDORA-2010-10332

Check for the Version of gnome-sharp OpenVAS Vulnerability Test Fedora Update for gnome-sharp FEDORA-2010-10332 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

Ubuntu: Security Advisory (USN-962-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-962-1: VTE vulnerability

Janne Snabb discovered that applications using VTE, such as gnome-terminal, did not correctly filter window and icon title request escape codes. If a user were tricked into viewing specially crafted output in their terminal, a remote attacker could execute arbitrary commands with user privileges...

vte -- Classic terminal title set+query attack

Kees Cook reports: Janne Snabb discovered that applications using VTE, such as gnome-terminal, did not correctly filter window and icon title request escape codes. If a user were tricked into viewing specially crafted output in their terminal, a remote attacker could execute arbitrary commands wi...

[SECURITY] Fedora 13 Update: gnome-sharp-2.24.1-1.fc13

This package provides a library that allows you to build fully native graphical GNOME applications using Mono. gnome-sharp extends gtk-sharp2 and adds bindings for gconf, libgnome, gnome-vfs, libart, gtkhtml, librsvg, and vte...

CVE-2003-0070

CVE-2003-0070 affects VTE as used by gnome-terminal; the vte_sequence_handler_window_manipulation routine fails to sanitize certain escape sequences, allowing an attacker to modify the window title and inject it back into the command line, potentially enabling arbitrary command execution. This is...

CVE-2003-0070: Undefined Security Weakness

VTE, as used by default in gnome-terminal terminal emulator 2.2 and as an option in gnome-terminal 2.0, allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containin...

CVE-2003-0070

VTE, as used by default in gnome-terminal terminal emulator 2.2 and as an option in gnome-terminal 2.0, allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containin...

CVE-2003-0070

VTE, as used by default in gnome-terminal terminal emulator 2.2 and as an option in gnome-terminal 2.0, allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containin...