Lucene search
+L

6340 matches found

RedHat Linux
RedHat Linux
•added 2009/01/07 1:42 p.m.•51 views

Important: Red Hat Security Advisory: hanterm-xf security update

An updated hanterm-xf package to correct a security issue is now available for Red Hat Enterprise Linux 2.1. This update has been rated as having important security impact by the Red Hat Security Response Team. Hanterm is a replacement for xterm, a X Window System terminal emulator, that supports...

9.3CVSS5.7AI score0.04934EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2009/01/07 11:09 a.m.•43 views

Important: Red Hat Security Advisory: xterm security update

An updated xterm package to correct a security issue is now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The xterm program is a terminal emulator for the X Window System. A flaw was found ...

9.3CVSS5.7AI score0.04934EPSS
SaveExploits0References2
Fedora
Fedora
•added 2009/01/07 9:25 a.m.•48 views

[SECURITY] Fedora 8 Update: xterm-238-1.fc8

The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and Tektronix 4014 compatible terminals for programs that can't use the window system directly...

9.3CVSS2.1AI score0.04934EPSS
SaveExploits0
Fedora
Fedora
•added 2009/01/07 9:16 a.m.•40 views

[SECURITY] Fedora 10 Update: xterm-238-1.fc10

The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and Tektronix 4014 compatible terminals for programs that can't use the window system directly...

9.3CVSS2.1AI score0.04934EPSS
SaveExploits0
Fedora
Fedora
•added 2009/01/07 9:12 a.m.•55 views

[SECURITY] Fedora 9 Update: xterm-238-1.fc9

The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and Tektronix 4014 compatible terminals for programs that can't use the window system directly...

9.3CVSS2.1AI score0.04934EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2009/01/07 12:00 a.m.•32 views

Debian: Security Advisory (DSA-1694-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.5AI score0.04934EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2009/01/07 12:00 a.m.•43 views

Debian Security Advisory DSA 1694-1 (xterm)

The remote host is missing an update to xterm announced via advisory DSA 1694-1. OpenVAS Vulnerability Test $Id: deb16941.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1694-1 xterm Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

9.3CVSS0.04934EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2009/01/06 12:00 a.m.•45 views

Debian DSA-1694-1 : xterm - design flaw

Paul Szabo discovered that xterm, a terminal emulator for the X Window System, places arbitrary characters into the input buffer when displaying certain crafted escape sequences CVE-2008-2383 . As an additional precaution, this security update also disables font changing, user-defined keys, and X...

9.3CVSS5.8AI score0.04934EPSS
SaveExploits0References4
OSV
OSV
•added 2009/01/02 12:00 a.m.•68 views

DSA-1694-1 xterm - remote code execution

Bulletin has no description...

9.3CVSS7.2AI score0.04934EPSS
SaveExploits0
myhack58
myhack58
•added 2009/01/01 12:00 a.m.•46 views

Build a fully functional MYSQL UDF-vulnerability warning-the black bar safety net

Now online through the mysql get system privileges, mostly by the MYSQL user function interface UDF, 比如Mix.dll和myudf.dll the. In the Mix. the dll has a MixConnect function it will bounce the shell, but using this function will cause the MYSQL suspended animation, the other day I used this functio...

7.1AI score
SaveExploits0
UbuntuCve
UbuntuCve
•added 2008/12/08 11:30 p.m.•33 views

CVE-2008-5372

sdm-login in sdm-terminal 0.4.0b allows local users to overwrite arbitrary files via a symlink attack on the /tmp/sdm.autologin.once temporary file...

6.9CVSS5.9AI score0.00353EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2008/12/08 11:00 p.m.•34 views

CVE-2008-5372

sdm-login in sdm-terminal 0.4.0b allows local users to overwrite arbitrary files via a symlink attack on the /tmp/sdm.autologin.once temporary file...

6.3AI score0.00353EPSS
SaveExploits0References1
CVE
CVE
•added 2008/12/08 11:00 p.m.•61 views

CVE-2008-5372

The CVE-2008-5372 entry concerns sdm-login in sdm-terminal 0.4.0b, where a local user can exploit a symlink vulnerability to overwrite the temporary file /tmp/sdm.autologin.once. This is a local privilege issue that can impact confidentiality and integrity (as indicated by the CVE data) through a...

6.9CVSS6.3AI score0.00353EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/12/08 12:00 a.m.•7 views

CVE-2008-5372: Improper Link Resolution Before File Access

sdm-login in sdm-terminal 0.4.0b allows local users to overwrite arbitrary files via a symlink attack on the /tmp/sdm.autologin.once temporary file...

6.9CVSS5.8AI score0.00353EPSS
SaveExploits0References2
NVD
NVD
•added 2008/11/18 4:00 p.m.•20 views

CVE-2008-5143

mgt-helper in multi-gnome-terminal 1.6.2 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/.debug or 2 /tmp/.env temporary file...

6.9CVSS6.3AI score0.00339EPSS
SaveExploits0References2
Prion
Prion
•added 2008/11/18 4:00 p.m.•25 views

Arbitrary file deletion

mgt-helper in multi-gnome-terminal 1.6.2 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/.debug or 2 /tmp/.env temporary file...

6.9CVSS6.8AI score0.00339EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2008/11/18 3:00 p.m.•53 views

CVE-2008-5143

CVE-2008-5143 affects mgt-helper in multi-gnome-terminal 1.6.2. The vulnerability allows local users to overwrite arbitrary files via a symlink attack on temporary files in /tmp, specifically targeting files matching *.debug or *.env. The root cause is a symlink-related race condition during file...

6.9CVSS6.3AI score0.00339EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2008/11/18 3:00 p.m.•29 views

CVE-2008-5143

mgt-helper in multi-gnome-terminal 1.6.2 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/.debug or 2 /tmp/.env temporary file...

6.3AI score0.00339EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/11/18 12:00 a.m.•5 views

CVE-2008-5143: Improper Link Resolution Before File Access

mgt-helper in multi-gnome-terminal 1.6.2 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/.debug or 2 /tmp/.env temporary file...

6.9CVSS5.8AI score0.00339EPSS
SaveExploits0References2
seebug.org
seebug.org
•added 2008/10/05 12:00 a.m.•148 views

Apache终端转义序列过滤漏洞

CVECAN ID: CVE-2003-0083 Apache是一款广泛使用的开放源代码WEB服务程序。 Apache对日志中的转义序列处理存在问题,攻击者可能利用恶意的日志信息在服务器执行任意命令。 Apache无法过滤错误日志中以ASCII(0x1B)序列开始且带有一系列参数的终端转义序列。如果攻击者能够向Apache错误日志中注入转义序列的话,就可能对远程用户发动各种攻击,包括拒绝服务,文件修改和执行任意命令。 Apache Group Apache 1.3.9 Apache Group Apache 1.3.6 Apache Group Apache 1.3.4 Apache...

5CVSS6.4AI score0.17413EPSS
SaveExploits8
Rows per page
Query Builder