113 matches found
Buffer overflow
Buffer overflow in Library of Assorted Spiffy Things LibAST 0.6.1 and earlier, as used in Eterm and possibly other software, allows local users to execute arbitrary code as the utmp user via a long -X command line argument alternative configuration file name...
CVE-2006-0224
CVE-2006-0224 describes a local buffer overflow in LibAST (Library of Assorted Spiffy Things) up to version 0.6.1, used by eterm and possibly others, allowing local users to execute arbitrary code as the utmp user via a long -X argument. Multiple connected advisories confirm the same issue and ma...
CVE-2006-0224: Undefined Security Weakness
Buffer overflow in Library of Assorted Spiffy Things LibAST 0.6.1 and earlier, as used in Eterm and possibly other software, allows local users to execute arbitrary code as the utmp user via a long -X command line argument alternative configuration file name...
Eterm LibAST 0.7 - -X Option Privilege Escalation
Eterm LibAST 0.7 - -X Option Privilege Escalation // eterm by default isn't setuid but there is a lot of instances where // it needs setuid root/utmp to run different options. /str0ke / Copyright ©Rosiello Security 2006 URL: http://www.rosiello.org Author: Johnny Mast e-mail: [email protected] Th...
Eterm LibAST < 0.7 - '-X' Option Privilege Escalation
// eterm by default isn't setuid but there is a lot of instances where // it needs setuid root/utmp to run different options. /str0ke / Copyright ©Rosiello Security 2006 URL: http://www.rosiello.org Author: Johnny Mast e-mail: [email protected] This program is free software; you can redistribute ...
Eterm LibAST < 0.7 (-X Option) Local Privilege Escalation Exploit
Exploit for linux platform in category local exploits ================================================================= Eterm LibAST 0.7 -X Option Local Privilege Escalation Exploit ================================================================= // eterm by default isn't setuid but there is a l...
Eterm LibAST < 0.7 (-X Option) Local Privilege Escalation Exploit
No description provided by source. // eterm by default isn't setuid but there is a lot of instances where // it needs setuid root/utmp to run different options. /str0ke / Copyright ©Rosiello Security 2006 URL: http://www.rosiello.org Author: Johnny Mast e-mail: [email protected] This program is...
Debian DSA-309-1 : eterm - buffer overflow
'bazarr' discovered that eterm is vulnerable to a buffer overflow of the ETERMPATH environment variable. This bug can be exploited to gain the privileges of the group 'utmp' on a system where eterm is installed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...
Debian DSA-496-1 : eterm - missing input sanitising
H.D. Moore discovered several terminal emulator security issues. One of them covers escape codes that are interpreted by the terminal emulator. This could be exploited by an attacker to insert malicious commands hidden for the user, who has to hit enter to continue, which would also execute the...
CVE-2003-0068
The CVE-2003-0068 issue affects the Eterm terminal emulator up to version 0.9.1, where a crafted escape sequence could modify the window title and then be re-inserted into the command line, enabling arbitrary command execution in the user’s terminal. Public advisories (including Debian DSA-496 an...
CVE-2003-0021
The "screen dump" feature in Eterm 0.9.1 and earlier allows attackers to overwrite arbitrary files via a certain character escape sequence when it is echoed to a user's terminal, e.g. when the user views a file containing the malicious sequence...
CVE-2003-0068
The Eterm terminal emulator 0.9.1 and earlier allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker t...
CVE-2003-0068
The Eterm terminal emulator 0.9.1 and earlier allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker t...
CVE-2003-0021
The CVE-2003-0021 issue affects Eterm 0.9.1 and earlier, where the terminal’s screen-dump feature can be abused by a crafted escape sequence to overwrite arbitrary files when echoed to a user’s terminal (e.g., during viewing a file containing the sequence). The root cause is a vulnerability in ho...
CVE-2003-0021
The "screen dump" feature in Eterm 0.9.1 and earlier allows attackers to overwrite arbitrary files via a certain character escape sequence when it is echoed to a user's terminal, e.g. when the user views a file containing the malicious sequence...
CVE-2003-0021: Undefined Security Weakness
The "screen dump" feature in Eterm 0.9.1 and earlier allows attackers to overwrite arbitrary files via a certain character escape sequence when it is echoed to a user's terminal, e.g. when the user views a file containing the malicious sequence...
CVE-2003-0068: Undefined Security Weakness
The Eterm terminal emulator 0.9.1 and earlier allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker t...
Mandrake Linux Security Advisory : Eterm (MDKSA-2003:040)
Digital Defense Inc. released a paper detailing insecurities in various terminal emulators, including Eterm. Many of the features supported by these programs can be abused when untrusted data is displayed on the screen. This abuse can be anything from garbage data being displayed to the screen or...
[SECURITY] [DSA 496-1] New eterm packages fix indirect arbitrary command execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 496-1 [email protected] http://www.debian.org/security/ Martin Schulze April 29th, 2004 http://www.debian.org/security/faq -...
