xterm vulnerabilities

2009-01-0600:00:00

ubuntu.com

8 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.085 Low

EPSS

Percentile

94.4%

JSON

Releases

Ubuntu 8.10
Ubuntu 8.04
Ubuntu 7.10
Ubuntu 6.06

Packages

xterm -

Details

Paul Szabo discovered that the DECRQSS escape sequences were not handled
correctly by xterm. Additionally, window title operations were also not
safely handled. If a user were tricked into viewing a specially crafted
series of characters while in xterm, a remote attacker could execute
arbitrary commands with user privileges. (CVE-2006-7236, CVE-2008-2382)

OSVersionArchitecturePackageVersionFilename
Ubuntu8.10noarchxterm< 235-1ubuntu1.1UNKNOWN
Ubuntu8.04noarchxterm< 229-1ubuntu1.1UNKNOWN
Ubuntu7.10noarchxterm< 229-1ubuntu0.1UNKNOWN
Ubuntu6.06noarchxterm< 208-3.1ubuntu3.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	8.10	noarch	xterm	< 235-1ubuntu1.1	UNKNOWN
Ubuntu	8.04	noarch	xterm	< 229-1ubuntu1.1	UNKNOWN
Ubuntu	7.10	noarch	xterm	< 229-1ubuntu0.1	UNKNOWN
Ubuntu	6.06	noarch	xterm	< 208-3.1ubuntu3.1	UNKNOWN