Eterm 0.8.10 / rxvt 2.6.1 / PuTTY 0.48 / X11R6 3.3.3/4.0 - Denial of Service

// source: https://www.securityfocus.com/bid/1298/info xterm is a popular X11-based terminal emulator. If VT control-characters are displayed in the xterm, they can be interpreted and used to cause a denial of service attack against the client and even the host running the client. What makes it...

Eterm 0.8.10 rxvt 2.6.1 PuTTY 0.48 X11R6 3.3.34.0 - Denial of Service

Eterm 0.8.10 rxvt 2.6.1 PuTTY 0.48 X11R6 3.3.34.0 - Denial of Service // source: https://www.securityfocus.com/bid/1298/info xterm is a popular X11-based terminal emulator. If VT control-characters are displayed in the xterm, they can be interpreted and used to cause a denial of service attack...

kppp-1.6.14.txt

here exists a bug in kppp 1.6.14 where a local user dialing up into the internet can copy the stars in the password box and put them into an xterm where the stars will be unrevealed and that password will be shown. seeya rarez...

CVE-1999-0965

CVE-1999-0965 is a race condition in xterm that allows local users to modify arbitrary files via the logging option. The vulnerability is documented across multiple sources (NVD, RH, MSRC, cve.org) as a local-privilege impact tied to xterm’s logging feature. Root cause stated as a race condition;...

CVE-1999-0965

Race condition in xterm allows local users to modify arbitrary files via the logging option...

CVE-1999-0126

CVE-1999-0126 describes a buffer overflow in SGI IRIX affecting the xterm and Xaw components, enabling local privilege escalation to root. The root cause is a memory overflow in these X-related tools, leading to compromise of the running system with root access . Public details in the connected d...

CVE-1999-0126

SGI IRIX buffer overflow in xterm and Xaw allows root access...

libtermcap_xterm_exploit.txt

Subject: libtermcap xterm exploit To: [email protected] / libtermcap xterm exploit by m0f0 1999 it works for xterm/nxterm Tested Slackware 3.5, 3.6 / include define BUFSIZE 5000 define POSRET 2000 define POSSEP 3000 define RETADDR 0xbfffefef define EGG "/tmp/eggtermcap" // shellcode char...

RedHat Linux 6.0 Slackware Linux 4.0 - Termcap tgetent() Local Buffer Overflow (1)

RedHat Linux 6.0 Slackware Linux 4.0 - Termcap tgetent Local Buffer Overflow 1 // source: https://www.securityfocus.com/bid/588/info A buffer overflow existed in libtermcap's tgetent function, which could cause the user to execute arbitrary code if they were able to supply their own termcap file...

RedHat Linux 6.0 / Slackware Linux 4.0 - Termcap 'tgetent()' Local Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/588/info A buffer overflow existed in libtermcap's tgetent function, which could cause the user to execute arbitrary code if they were able to supply their own termcap file. Versions of libtermcap 2.0.8 and earliear are vulnerable. Under Red Hat Linux...

RedHat Linux 6.0 / Slackware Linux 4.0 - Termcap 'tgetent()' Local Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/588/info A buffer overflow existed in libtermcap's tgetent function, which could cause the user to execute arbitrary code if they were able to supply their own termcap file. Versions of libtermcap 2.0.8 and earliear are vulnerable. Under Red Hat Linux...

redhat.6.0.pts.permissions.txt

Date: Sun, 6 Jun 1999 19:15:05 +0000 From: noc-wage To: [email protected] Subject: RedHat 6.0, /dev/pts permissions bug when using xterm Once again I've come up with another trivial Denial of Service flaw, wow, I seem to be good at this Conseal Firewall, +++ath0, ppp byte-stuffing It's been a...

Xcmail 0.99.6 - Local Buffer Overflow

Xcmail 0.99.6 - Local Buffer Overflow / source: https://www.securityfocus.com/bid/311/info XCmail is an X11 mail client for linux. Arthur discovered an exploitable buffer overflow vulnerability in xcmail. The bug appears when replying to a message with a long subject line, and only when autoquote...

CVE-1999-0126

SGI IRIX buffer overflow in xterm and Xaw allows root access...

CVE-1999-1210

xterm in Digital UNIX 4.0B with patch kit 5 allows local users to overwrite arbitrary files via a symlink attack on a core dump file, which is created when xterm is called with a DISPLAY environmental variable set to a display that xterm cannot access...

CVE-1999-0965

Race condition in xterm allows local users to modify arbitrary files via the logging option...

PT-1997-1174 · Xterm · Xterm

Name of the Vulnerable Software and Affected Versions: xterm affected versions not specified Description: A race condition in xterm allows local users to modify arbitrary files via the logging option. Recommendations: At the moment, there is no information about a newer version that contains a fi...

Solaris 5.5.1 X11R6.3 - xterm -xrm Local Privilege Escalation

Solaris 5.5.1 X11R6.3 - xterm -xrm Local Privilege Escalation / X11R6.3 xterm exploit for solaris 5.5.1 by DCRH 28/5/97 / include include include include define EXTRA2 1300 define BUFLENGTH 400 define EXTRA 500 / Need an addr such that contents of addr+0xe98 = 0 / define SAFEADDR unsigned0xefff20...

Solaris 5.5.1 X11R6.3 - xterm '-xrm' Local Privilege Escalation

/ X11R6.3 xterm exploit for solaris 5.5.1 by DCRH 28/5/97 / include include include include define EXTRA2 1300 define BUFLENGTH 400 define EXTRA 500 / Need an addr such that contents of addr+0xe98 = 0 / define SAFEADDR unsigned0xefff2008 define STACKOFFSET 0x4800 define SPARCNOP 0xa61cc013 ulong...

Slackware Linux 3.13.2 - color_xterm Local Buffer Overflow (2)

Slackware Linux 3.13.2 - colorxterm Local Buffer Overflow 2 / source: https://www.securityfocus.com/bid/369/info In Slackware Linux 3.1 and 3.2, the version of color xterm included is vulnerable to a buffer overflow attack that allows for a local user to gain root access. / / colorxterm buffer...