FreeBSD : vte -- Classic terminal title set+query attack (9a8fecef-92c0-11df-b140-0015f2db7bde)

Kees Cook reports : Janne Snabb discovered that applications using VTE, such as gnome-terminal, did not correctly filter window and icon title request escape codes. If a user were tricked into viewing specially crafted output in their terminal, a remote attacker could execute arbitrary commands...

Ubuntu 9.04 / 9.10 / 10.04 LTS : vte vulnerability (USN-962-1)

Janne Snabb discovered that applications using VTE, such as gnome-terminal, did not correctly filter window and icon title request escape codes. If a user were tricked into viewing specially crafted output in their terminal, a remote attacker could execute arbitrary commands with user privileges...

Ubuntu Update for vte vulnerability USN-962-1

Ubuntu Update for Linux kernel vulnerabilities USN-962-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9621.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for vte vulnerability USN-962-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.n...

VTE control characters vulnerability

Control characters are not checked when setting window or icon title, making it possible to insert terminal ESC-sequences...

CVE-2010-2713

The vtesequencehandlerwindowmanipulation function in vteseq.c in libvte aka libvte9 in VTE 0.25.1 and earlier, as used in gnome-terminal, does not properly handle escape sequences, which allows remote attackers to execute arbitrary commands or obtain potentially sensitive information via a 1 wind...

USN-962-1: VTE vulnerability

Janne Snabb discovered that applications using VTE, such as gnome-terminal, did not correctly filter window and icon title request escape codes. If a user were tricked into viewing specially crafted output in their terminal, a remote attacker could execute arbitrary commands with user privileges...

vte -- Classic terminal title set+query attack

Kees Cook reports: Janne Snabb discovered that applications using VTE, such as gnome-terminal, did not correctly filter window and icon title request escape codes. If a user were tricked into viewing specially crafted output in their terminal, a remote attacker could execute arbitrary commands wi...

Combat tells the switch password hack the strategy-vulnerability and early warning-the black bar safety net

A network environment The company use solid up to 3 5 0 0 seriesspecific models is 3 5 4 8The switch, the switch above is connected to a Huawei 2 6 2 1 router, via telecommunications fiber optic Internet access. The actual situation of this station Setia 3 5 4 8 switch is the previous network...

Mac OS X 10.5.7 Update / Mac OS X Security Update 2009-002

The remote host is missing Mac OS X 10.5.7 Update / Mac OS X Security Update 2009-002. One or more of the following components are affected: Apache ATS BIND CFNetwork CoreGraphics Cscope CUPS Disk Images enscript Flash Player plug-in Help Viewer iChat International Components for Unicode IPSec...

Mac OS X 10.5.2 Update / Mac OS X Security Update 2008-001

The remote host is missing Mac OS X 10.5.2 Update / Security Update 2008-001. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Mac OS X 10.5.2 Update / Mac OS X Security Update 2008-001

The remote host is missing Mac OS X 10.5.2 Update / Security Update 2008-001. One or more of the following components are affected: Directory Services Foundation Launch Services Mail NFS Open Directory Parental Controls Samba Terminal X11 OpenVAS Vulnerability Test Mac OS X 10.5.2 Update / Securi...

Mac OS X 10.5.7 Update / Mac OS X Security Update 2009-002

The remote host is missing Mac OS X 10.5.7 Update / Mac OS X Security Update 2009-002. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

linux/x86 - sends "Phuck3d!" to all terminals 60 bytes

linux/x86 sends "Phuck3d!" to all terminals 60 bytes shellcode. Shellcode exploit for linux platform / $Id: where-is-wallie.c, v 1.0 2010/04/24 18:32:29 condis Exp $ linux/x86 sends "Phuck3d!" to all terminals 60 bytes shellcode by condis Tested on: Linux Debian / int mainvoid char evil =...

GLSA-201001-09 : Ruby: Terminal Control Character Injection

The remote host is affected by the vulnerability described in GLSA-201001-09 Ruby: Terminal Control Character Injection Giovanni Pellerano, Alessandro Tanasi and Francesco Ongaro reported that WEBrick does not filter terminal control characters, for instance when handling HTTP logs. Impact : A...

Varnish Log Escape Sequence Injection Vulnerability

This host is installed with Varnish and is prone to Log Escape Sequence Injection Vulnerability. OpenVAS Vulnerability Test $Id: gbvarnishlogsescapesequenceinjvuln.nasl 5390 2017-02-21 18:39:27Z mime $ Varnish Log Escape Sequence Injection Vulnerability Authors: Antu Sanadi Copyright: Copyright c...

Varnish < 2.1.2 Log Escape Sequence Injection Vulnerability

Varnish is prone to a log escape sequence injection vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

bash terminal characters injection

It's possible to inject ESC-sequences into ls command output...

CVE-2010-0002

The /etc/profile.d/60alias.sh script in the Mandriva bash package for Bash 2.05b, 3.0, 3.2, 3.2.48, and 4.0 enables the --show-control-chars option in LSOPTIONS, which allows local users to send escape sequences to terminal emulators, or hide the existence of a file, via a crafted filename...

Code injection

The /etc/profile.d/60alias.sh script in the Mandriva bash package for Bash 2.05b, 3.0, 3.2, 3.2.48, and 4.0 enables the --show-control-chars option in LSOPTIONS, which allows local users to send escape sequences to terminal emulators, or hide the existence of a file, via a crafted filename...

CVE-2010-0002

The /etc/profile.d/60alias.sh script in the Mandriva bash package for Bash 2.05b, 3.0, 3.2, 3.2.48, and 4.0 enables the --show-control-chars option in LSOPTIONS, which allows local users to send escape sequences to terminal emulators, or hide the existence of a file, via a crafted filename...