Minix 3.1.2a - Psuedo Terminal Denial of Service

Minix 3.1.2a - Psuedo Terminal Denial of Service source: https://www.securityfocus.com/bid/30357/info Minix is prone to a denial-of-service vulnerability. An attacker can exploit this issue to prevent users from opening new pseudo terminals, denying service to legitimate users. Minix 3.1.2a is...

GLSA-200805-03 : Multiple X11 terminals: Local privilege escalation

The remote host is affected by the vulnerability described in GLSA-200805-03 Multiple X11 terminals: Local privilege escalation Bernhard R. Link discovered that RXVT opens a terminal on :0 if the '-display' option is not specified and the DISPLAY environment variable is not set. Further research ...

[ GLSA 200805-03 ] Multiple X11 terminals: Local privilege escalation

Gentoo Linux Security Advisory GLSA 200805-03 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

(mesg: error: tty device is not owned by group `tty')

xterm, including 192-7.el4 in Red Hat Enterprise Linux and 208-3.1 in Debian GNU/Linux, sets the wrong group ownership of tty devices, which allows local users to write data to other users' terminals...

CVE-2007-2797

xterm, including 192-7.el4 in Red Hat Enterprise Linux and 208-3.1 in Debian GNU/Linux, sets the wrong group ownership of tty devices, which allows local users to write data to other users' terminals...

CVE-2007-2797

xterm, including 192-7.el4 in Red Hat Enterprise Linux and 208-3.1 in Debian GNU/Linux, sets the wrong group ownership of tty devices, which allows local users to write data to other users' terminals...

CVE-2007-2797

The CVE-2007-2797 issue affects xterm: Red Hat Enterprise Linux 4 (and derivatives such as CentOS 4) packages built with a bug that caused pseudo-terminal device files to be owned by the wrong group, enabling local users to write data to other users’ terminals. Public advisories (RHSA-2007:0701, ...

AK-Systems Windows Terminals远程未授权管理访问漏洞

基于WinCE的Windows Terminals thin客户端由AK-Systems公司制作的包含VNC服务来远程管理和设置的应用程序。 新固件版本的应用程序其VNC访问没有通过密码保护，因此任何有VNC客户端的用户可以连接终端并查看RDP/Citrix会话或进行中间人攻击。 AK-Systems Windows Terminal 1.2.5 ExVLP http://www.ak-systems.ru/products/models/...

unauthorized VNC access in AK-Systems Windows Terminals

WinCE-based Windows Terminals thin clients manufactured by AK-Systems http://www.ak-systems.ru/ with firmware version 1.2.5 ExVLP feature a VNC server for remote administration and setup. The VNC access is not protected by password, so anyone with a VNC client can connect to the terminal and watc...

CVE-2004-2215

RXVT-Unicode 3.4 and 3.5 does not properly close file descriptors, which allows local users to access the terminals of other users and possibly gain privileges...

Mac OS X < 10.4 pty Permission Weakness

The remote host is running a version of Mac OS X which is older than version 10.4. Versions older than 10.4 contain a security issue in the way they handle the permissions of pseudo terminals. When an application uses a new pseudo terminal, it can not restrict its permissions to a safe mode. As a...

security flaw

initdev in ttyio.c in the Red Hat backport of NPTL to Red Hat Enterprise Linux 3 does not properly clear controlling tty's in multi-threaded applications, which allows local users to cause a denial of service crash and possibly gain tty access via unknown attack vectors that trigger an access of ...

security flaw

Apache 1.3 before 1.3.25 and Apache 2.0 before version 2.0.46 does not filter terminal escape sequences from its access logs, which could make it easier for attackers to insert those sequences into terminal emulators containing vulnerabilities related to escape sequences, a different vulnerabilit...

DEBIAN-CVE-2003-0020

Apache does not filter terminal escape sequences from its error logs, which could make it easier for attackers to insert those sequences into terminal emulators containing vulnerabilities related to escape sequences...

Multiple vulnerabilities exist within credit card chips thereby allowing malicious user to bypass authentication mechanism

Overview French smart card reader terminals can be fooled into accepting imposter smart cards for payment. Description French smart cards are credit cards with an embedded chip containing certain cardholder, account, and authentication information. These cards are read by automated terminals acro...

PT-2000-1029 · Red Hat · Red Hat

Name of the Vulnerable Software and Affected Versions: Red Hat Linux affected versions not specified Description: The issue is related to the screen program in Red Hat Linux, which does not utilize Unix98 ptys. This allows local users to write to other terminals. Recommendations: At the moment,...

glibc_exploit.txt

Subject: Linux glibc 2.1.x / wu-ftpd =2.5 / BeroFTPD / lynx / vlock / mc / glibc 2.0.x To: [email protected] First of all, something less or more personal - sorry to all [email protected] people for this post. I'm really angry, as this stuff become well-known without my knowledge... so, only a...

chase.online.banking.txt

Date: Thu, 06 May 1999 12:40:08 GMT From: [email protected] Daniel Norton Subject: Security/privacy hole in Chase Online Banking Here's an excerpt from a letter I faxed to Chase Online Banking www.chase.com the other day. Not only have they not fixed the problem, they apparently didn't...

bigfoot-bellsouth-webmail.txt

Date: Fri, 8 Jan 1999 07:07:20 -0600 From: "Madere, Russel" To: [email protected] Subject: Bigfoot/Bellsouth Webmail bug I seem to have found another "bug" with the Bigfoot/Bellsouth Webmail. Users can log back into the service from cached pages. This is a huge security hole, especially for...