Fedora Core 8 FEDORA-2009-0154 (xterm)

The remote host is missing an update to xterm announced via advisory FEDORA-2009-0154. OpenVAS Vulnerability Test $Id: fcore20090154.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-0154 xterm Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

RHEL 4 / 5 : xterm (RHSA-2009:0018)

The remote Redhat Enterprise Linux 4 / 5 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2009:0018 advisory. - xterm: arbitrary command injection CVE-2008-2383 Note that Nessus has not tested for this issue but has instead relied only on the application'...

FreeBSD Ports: xterm

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

RedHat Security Advisory RHSA-2009:0018

The remote host is missing updates announced in advisory RHSA-2009:0018. The xterm program is a terminal emulator for the X Window System. A flaw was found in the xterm handling of Device Control Request Status String DECRQSS escape sequences. An attacker could create a malicious text file or log...

Fedora Core 8 FEDORA-2009-0154 (xterm)

The remote host is missing an update to xterm announced via advisory FEDORA-2009-0154. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

[SECURITY] [DSA 1694-2] New xterm packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1694-2 [email protected] http://www.debian.org/security/ Florian Weimer January 06, 2009 http://www.debian.org/security/faq -...

USN-703-1: xterm vulnerabilities

Paul Szabo discovered that the DECRQSS escape sequences were not handled correctly by xterm. Additionally, window title operations were also not safely handled. If a user were tricked into viewing a specially crafted series of characters while in xterm, a remote attacker could execute arbitrary...

Debian XTERM - DECRQSScomments Code Execution

Debian XTERM - DECRQSScomments Code Execution Package: xterm Version: 222-1etch2 Severity: grave Tags: security patch Justification: user security hole DECRQSS Device Control Request Status String "DCS $ q" simply echoes responds with invalid commands. For example, perl -e 'print...

Debian XTERM - 'DECRQSS/comments' Code Execution

Package: xterm Version: 222-1etch2 Severity: grave Tags: security patch Justification: user security hole DECRQSS Device Control Request Status String "DCS $ q" simply echoes responds with invalid commands. For example, perl -e 'print "\eP$q\nbad-command\n\e\"' would run bad-command...

FreeBSD : xterm -- DECRQSS remote command execution vulnerability (d5e1aac8-db0b-11dd-ae30-001cc0377035)

SecurityFocus reports : The xterm program is prone to a remote command-execution vulnerability because it fails to sufficiently validate user input. Successfully exploiting this issue would allow an attacker to execute arbitrary commands on an affected computer in the context of the affected...

Debian DSA-1694-1 : xterm - design flaw

Paul Szabo discovered that xterm, a terminal emulator for the X Window System, places arbitrary characters into the input buffer when displaying certain crafted escape sequences CVE-2008-2383 . As an additional precaution, this security update also disables font changing, user-defined keys, and X...

Debian GNU/Linux XTERM (DECRQSS/comments) Weakness Vulnerability

Exploit for linux platform in category local exploits ================================================================ Debian GNU/Linux XTERM DECRQSS/comments Weakness Vulnerability ================================================================ Package: xterm Version: 222-1etch2 Severity: grave...

DTSA-182-1 xterm - remote code execution

Bulletin has no description...

[SECURITY] [DSA 1694-1] New xterm packages fix remote code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1694-1 [email protected] http://www.debian.org/security/ Florian Weimer January 02, 2009 http://www.debian.org/security/faq -...

CVE-2006-7236

The default configuration of xterm on Debian GNU/Linux sid and possibly Ubuntu enables the allowWindowOps resource, which allows user-assisted attackers to execute arbitrary code or have unspecified other impact via escape sequences...

CVE-2006-7236

The default configuration of xterm on Debian GNU/Linux sid and possibly Ubuntu enables the allowWindowOps resource, which allows user-assisted attackers to execute arbitrary code or have unspecified other impact via escape sequences...

DEBIAN-CVE-2008-2383

CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF aka \n characters surrounding a command name within a Device Control Request Status String DECRQSS escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071...

DEBIAN-CVE-2006-7236

The default configuration of xterm on Debian GNU/Linux sid and possibly Ubuntu enables the allowWindowOps resource, which allows user-assisted attackers to execute arbitrary code or have unspecified other impact via escape sequences...

CVE-2008-2383

CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF aka \n characters surrounding a command name within a Device Control Request Status String DECRQSS escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071...

CVE-2008-2383

CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF aka \n characters surrounding a command name within a Device Control Request Status String DECRQSS escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071...