Debian Security Advisory DSA 1694-1 (xterm)

The remote host is missing an update to xterm announced via advisory DSA 1694-1. OpenVAS Vulnerability Test $Id: deb16941.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1694-1 xterm Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian GNU/Linux XTERM DECRQSS Weakness

Package: xterm Version: 222-1etch2 Severity: grave Tags: security patch Justification: user security hole DECRQSS Device Control Request Status String "DCS $ q" simply echoes responds with invalid commands. For example, perl -e 'print "\eP$q\nbad-command\n\e\"' would run bad-command...

xterm security update

215-5.el52.2 - Fix CVE-2008-2383...

RedHat Security Advisory RHSA-2009:0018

The remote host is missing updates announced in advisory RHSA-2009:0018. The xterm program is a terminal emulator for the X Window System. A flaw was found in the xterm handling of Device Control Request Status String DECRQSS escape sequences. An attacker could create a malicious text file or log...

Debian: Security Advisory (DSA-1694-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1694-2 (xterm)

The remote host is missing an update to xterm announced via advisory DSA 1694-2. OpenVAS Vulnerability Test $Id: deb16942.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1694-2 xterm Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Ubuntu USN-703-1 (xterm)

The remote host is missing an update to xterm announced via advisory USN-703-1. OpenVAS Vulnerability Test $Id: ubuntu7031.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7031.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-703-1 xterm Authors: Thomas Reinke...

Fedora Core 8 FEDORA-2009-0154 (xterm)

The remote host is missing an update to xterm announced via advisory FEDORA-2009-0154. OpenVAS Vulnerability Test $Id: fcore20090154.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-0154 xterm Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Fedora Core 10 FEDORA-2009-0091 (xterm)

The remote host is missing an update to xterm announced via advisory FEDORA-2009-0091. OpenVAS Vulnerability Test $Id: fcore20090091.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-0091 xterm Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Debian GNU/Linux XTERM (DECRQSS/comments) Weakness Vulnerability

No description provided by source. Package: xterm Version: 222-1etch2 Severity: grave Tags: security patch Justification: user security hole DECRQSS Device Control Request Status String "DCS $ q" simply echoes responds with invalid commands. For example, perl -e 'print "\eP$q\nbad-command\n\e\"'...

RHEL 4 / 5 : xterm (RHSA-2009:0018)

The remote Redhat Enterprise Linux 4 / 5 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2009:0018 advisory. - xterm: arbitrary command injection CVE-2008-2383 Note that Nessus has not tested for this issue but has instead relied only on the application'...

Fedora Core 8 FEDORA-2009-0154 (xterm)

The remote host is missing an update to xterm announced via advisory FEDORA-2009-0154. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

FreeBSD Ports: xterm

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

RedHat Security Advisory RHSA-2009:0018

The remote host is missing updates announced in advisory RHSA-2009:0018. The xterm program is a terminal emulator for the X Window System. A flaw was found in the xterm handling of Device Control Request Status String DECRQSS escape sequences. An attacker could create a malicious text file or log...

[SECURITY] [DSA 1694-2] New xterm packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1694-2 [email protected] http://www.debian.org/security/ Florian Weimer January 06, 2009 http://www.debian.org/security/faq -...

USN-703-1: xterm vulnerabilities

Paul Szabo discovered that the DECRQSS escape sequences were not handled correctly by xterm. Additionally, window title operations were also not safely handled. If a user were tricked into viewing a specially crafted series of characters while in xterm, a remote attacker could execute arbitrary...

Debian XTERM - DECRQSScomments Code Execution

Debian XTERM - DECRQSScomments Code Execution Package: xterm Version: 222-1etch2 Severity: grave Tags: security patch Justification: user security hole DECRQSS Device Control Request Status String "DCS $ q" simply echoes responds with invalid commands. For example, perl -e 'print...

Debian XTERM - 'DECRQSS/comments' Code Execution

Package: xterm Version: 222-1etch2 Severity: grave Tags: security patch Justification: user security hole DECRQSS Device Control Request Status String "DCS $ q" simply echoes responds with invalid commands. For example, perl -e 'print "\eP$q\nbad-command\n\e\"' would run bad-command...

Debian DSA-1694-1 : xterm - design flaw

Paul Szabo discovered that xterm, a terminal emulator for the X Window System, places arbitrary characters into the input buffer when displaying certain crafted escape sequences CVE-2008-2383 . As an additional precaution, this security update also disables font changing, user-defined keys, and X...

FreeBSD : xterm -- DECRQSS remote command execution vulnerability (d5e1aac8-db0b-11dd-ae30-001cc0377035)

SecurityFocus reports : The xterm program is prone to a remote command-execution vulnerability because it fails to sufficiently validate user input. Successfully exploiting this issue would allow an attacker to execute arbitrary commands on an affected computer in the context of the affected...