Attack Trojans-remote control software of its own vulnerability to your attention?-vulnerability warning-the black bar safety net

from:sowhat blog Two days before the RSA conference, there was a guy named Joel Eriksson researchers show how to attack the Trojans, particularly the Trojan control terminalto control the“hacker”. blog.wired.com/27bstroke6/2008/04/researcher-demo.html Eriksson found one in the Celestial Empire on...

CVE-2008-1845

The Korn shell aka mksh before R33d on MirOS aka MirBSD does not flush the tty's I/O when invoking mksh in a new terminal, which allows local users to gain privileges by opening a virtual terminal and entering command sequences, which might later be executed in opportunistic circumstances by a...

Design/Logic Flaw

The Korn shell aka mksh before R33d on MirOS aka MirBSD does not flush the tty's I/O when invoking mksh in a new terminal, which allows local users to gain privileges by opening a virtual terminal and entering command sequences, which might later be executed in opportunistic circumstances by a...

DEBIAN-CVE-2008-1845

The Korn shell aka mksh before R33d on MirOS aka MirBSD does not flush the tty's I/O when invoking mksh in a new terminal, which allows local users to gain privileges by opening a virtual terminal and entering command sequences, which might later be executed in opportunistic circumstances by a...

CVE-2008-1845

The Korn shell aka mksh before R33d on MirOS aka MirBSD does not flush the tty's I/O when invoking mksh in a new terminal, which allows local users to gain privileges by opening a virtual terminal and entering command sequences, which might later be executed in opportunistic circumstances by a...

CVE-2008-1692

Eterm 0.9.4 opens a terminal window on :0 if -display is not specified and the DISPLAY environment variable is not set, which might allow local users to hijack X11 connections. NOTE: realistic attack scenarios require that the victim enters a command on the wrong machine...

CVE-2008-1692

CVE-2008-1692 affects several X11 terminal emulators (Eterm 0.9.4; and also aterm, rxvt, rxvt-unicode, wterm, Mrxvt, multi-aterm) used on X displays. The root cause is that Eterm opens a :0 terminal when -display is not provided and DISPLAY is unset, enabling a local attacker to hijack X11 termin...

CVE-2008-1692

Eterm 0.9.4 opens a terminal window on :0 if -display is not specified and the DISPLAY environment variable is not set, which might allow local users to hijack X11 connections. NOTE: realistic attack scenarios require that the victim enters a command on the wrong machine...

Code injection

rxvt 2.6.4 opens a terminal window on :0 if the DISPLAY environment variable is not set, which might allow local users to hijack X11 connections. NOTE: it was later reported that rxvt-unicode, mrxvt, aterm, multi-aterm, and wterm are also affected. NOTE: realistic attack scenarios require that th...

CVE-2008-1142

rxvt 2.6.4 opens a terminal window on :0 if the DISPLAY environment variable is not set, which might allow local users to hijack X11 connections. NOTE: it was later reported that rxvt-unicode, mrxvt, aterm, multi-aterm, and wterm are also affected. NOTE: realistic attack scenarios require that th...

CVE-2008-1142

rxvt 2.6.4 opens a terminal window on :0 if the DISPLAY environment variable is not set, which might allow local users to hijack X11 connections. NOTE: it was later reported that rxvt-unicode, mrxvt, aterm, multi-aterm, and wterm are also affected. NOTE: realistic attack scenarios require that th...

CVE-2008-1142

CVE-2008-1142 affects rxvt and related terminals (rxvt-unicode, mrxvt, aterm, multi-aterm, wterm) where opening a terminal on :0 if DISPLAY is not set enables local users to hijack X11 connections. This is caused by improper handling of DISPLAY during initialization. Public updates exist (e.g., r...

CVE-2008-1142

Removed by vendor...

sitekiosk-pwn.txt

Proviso SiteKiosk File Download Vulnerability x Vendor Information: "SiteKiosk is a software for public access internet terminals and lets you turn any computer into a secure multilanguage Internet terminal already 20 different languages included, allowing the user to access the Internet but...

CVE-2003-1544

Unrestricted critical resource lock in Terminal Services for Windows 2000 before SP4 and Windows XP allows remote authenticated users to cause a denial of service reboot by obtaining a read lock on msgina.dll, which prevents msgina.dll from being loaded...

CVE-2003-1544

CVE-2003-1544 affects Terminal Services on Windows 2000 (pre-SP4) and Windows XP. The vulnerability is an unrestricted critical resource lock that allows remote authenticated users to trigger a denial-of-service (reboot) by obtaining a read lock on msgina.dll, which prevents msgina.dll from loadi...

CVE-2008-0042

The CVE-2008-0042 issue affects Apple Mac OS X Terminal.app on Mac OS X 10.4.11 and 10.5 up to 10.5.1, due to input validation error when handling URL themes, allowing remote attackers to trigger execution of arbitrary commands. The vulnerability is part of a broader Apple advisory set (multiple ...

Terminal Services Encryption Level is not FIPS-140 Compliant

Binary data fipsrdp.nbin...

Debian Security Advisory DSA 1393-1 (xfce4-terminal)

The remote host is missing an update to xfce4-terminal announced via advisory DSA 1393-1. OpenVAS Vulnerability Test $Id: deb13931.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1393-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-496)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...