586 matches found
Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : xterm vulnerabilities (USN-703-1)
Paul Szabo discovered that the DECRQSS escape sequences were not handled correctly by xterm. Additionally, window title operations were also not safely handled. If a user were tricked into viewing a specially crafted series of characters while in xterm, a remote attacker could execute arbitrary...
Fedora 10 : xterm-238-1.fc10 (2009-0091)
This update fixes the following security issue: CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF aka \n characters surrounding a command name within a Device Control Request Status String DECRQSS escape sequence in a text file, a related...
Slackware 12.0 / 12.1 / 12.2 / current : xterm (SSA:2009-069-03)
New xterm packages are available for Slackware 12.0, 12.1, 12.2, and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2009-069-03. The text itself is...
xterm
New xterm packages are available for Slackware 12.0, 12.1, 12.2, and -current to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2008-2383 Here are the details from the Slackware 12.2 ChangeLog:...
Fedora Update for xterm FEDORA-2007-031
The remote host is missing an update for the Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora Update for xterm FEDORA-2007-024
The remote host is missing an update for the Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora Update for xterm FEDORA-2007-031
Check for the Version of xterm OpenVAS Vulnerability Test Fedora Update for xterm FEDORA-2007-031 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...
Fedora Update for xterm FEDORA-2007-024
Check for the Version of xterm OpenVAS Vulnerability Test Fedora Update for xterm FEDORA-2007-024 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...
CVE-2009-0141
XTerm in Apple Mac OS X 10.4.11 and 10.5.6, when used with luit, creates tty devices with insecure world-writable permissions, which allows local users to write to the Xterm of another user...
Information disclosure
XTerm in Apple Mac OS X 10.4.11 and 10.5.6, when used with luit, creates tty devices with insecure world-writable permissions, which allows local users to write to the Xterm of another user...
CVE-2009-0141
CVE-2009-0141 affects XTerm on Apple Mac OS X 10.4.11 and 10.5.6 when used with luit, where tty devices are created with insecure world-writable permissions. This allows a local user to write to another user’s XTerm. Public sources (NVD description) state the issue and a local-privelege context; ...
Mac OS X Multiple Vulnerabilities (Security Update 2009-001)
The remote host is running a version of Mac OS X 10.5 or 10.4 that does not have Security Update 2009-001 applied. This security update contains fixes for the following products : - AFP Server - Apple Pixlet Video - CarbonCore - CFNetwork - Certificate Assistant - ClamAV - CoreText - CUPS - DS...
Gentoo Security Advisory GLSA 200902-04 (xterm)
The remote host is missing updates announced in advisory GLSA 200902-04. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
CVE-2009-0141
XTerm in Apple Mac OS X 10.4.11 and 10.5.6, when used with luit, creates tty devices with insecure world-writable permissions, which allows local users to write to the Xterm of another user...
GLSA-200902-04 : xterm: User-assisted arbitrary commands execution
The remote host is affected by the vulnerability described in GLSA-200902-04 xterm: User-assisted arbitrary commands execution Paul Szabo reported an insufficient input sanitization when processing Device Control Request Status String DECRQSS sequences. Impact : A remote attacker could entice a...
Gentoo Security Advisory GLSA 200902-04 (xterm)
The remote host is missing updates announced in advisory GLSA 200902-04. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...
Apple Mac OS X 2009-001更新修复多个安全漏洞
BUGTRAQ ID: 33759 CVECAN ID: CVE-2009-0009,CVE-2009-0020,CVE-2009-0142,CVE-2009-0011,CVE-2009-0012,CVE-2009-0013,CVE-2009-0014,CVE-2009-0015,CVE-2009-0017,CVE-2009-0018,CVE-2009-0019,CVE-2009-0137,CVE-2009-0138,CVE-2009-0139,CVE-2009-0140,CVE-2009-0141 Mac OS X是苹果家族机器所使用的操作系统。 Apple...
PT-2009-2834 · Apple +1 · Xterm +2
Name of the Vulnerable Software and Affected Versions: XTerm in Apple Mac OS X versions 10.4.11 through 10.5.6 Description: The issue allows local users to write to the XTerm of another user due to insecure world-writable permissions on tty devices created when XTerm is used with luit...
xterm: User-assisted arbitrary commands execution
Background xterm is a terminal emulator for the X Window system. Description Paul Szabo reported an insufficient input sanitization when processing Device Control Request Status String DECRQSS sequences. Impact A remote attacker could entice a user to display a file containing specially crafted...
Fedora 9 : xterm-238-1.fc9 (2009-0059)
This update fixes the following security issue: CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF aka \n characters surrounding a command name within a Device Control Request Status String DECRQSS escape sequence in a text file, a related...