Lucene search
K

6 matches found

Veracode
Veracode
added 2020/04/10 12:28 a.m.32 views

CRLF Injection

Xterm is vulnerable to CRLF Injection. A flaw was found in the xterm handling of Device Control Request Status String DECRQSS escape sequences. An attacker could create a malicious text file or log entry, if unfiltered that could run arbitrary commands if read by a victim inside an xterm window...

9.3CVSS3AI score0.01716EPSS
Exploits0References32Affected Software1
OpenVAS
OpenVAS
added 2011/08/09 12:0 a.m.23 views

CentOS Update for xterm-215-5.el5 CESA-2009:0018 centos5 i386

Check for the Version of xterm-215-5.el5 OpenVAS Vulnerability Test CentOS Update for xterm-215-5.el5 CESA-2009:0018 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

9.3CVSS7.4AI score0.01716EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2009/01/16 12:0 a.m.54 views

Fedora 9 : xterm-238-1.fc9 (2009-0059)

This update fixes the following security issue: CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF aka \n characters surrounding a command name within a Device Control Request Status String DECRQSS escape sequence in a text file, a related...

9.3CVSS5.5AI score0.01716EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2009/01/07 12:0 a.m.54 views

Fedora Core 9 FEDORA-2009-0059 (xterm)

The remote host is missing an update to xterm announced via advisory FEDORA-2009-0059. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

9.3CVSS7.6AI score0.01716EPSS
Exploits0References2
Prion
Prion
added 2009/01/02 6:11 p.m.20 views

Crlf injection

CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF aka \n characters surrounding a command name within a Device Control Request Status String DECRQSS escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071...

9.3CVSS7.9AI score0.01716EPSS
Exploits0References28
Cvelist
Cvelist
added 2009/01/02 12:0 a.m.27 views

CVE-2008-2383

CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF aka \n characters surrounding a command name within a Device Control Request Status String DECRQSS escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071...

8.3AI score0.01716EPSS
Exploits0References28
Rows per page
Query Builder