Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-2383
HistoryJan 02, 2009 - 12:00 a.m.

CVE-2008-2383

2009-01-0200:00:00
ubuntu.com
ubuntu.com
13

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.013 Low

EPSS

Percentile

85.8%

CRLF injection vulnerability in xterm allows user-assisted attackers to
execute arbitrary commands via LF (aka \n) characters surrounding a command
name within a Device Control Request Status String (DECRQSS) escape
sequence in a text file, a related issue to CVE-2003-0063 and
CVE-2003-0071.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchxterm< 208-3.1ubuntu3.1UNKNOWN
ubuntu7.10noarchxterm< 229-1ubuntu0.1UNKNOWN
ubuntu8.04noarchxterm< 229-1ubuntu1.1UNKNOWN
ubuntu8.10noarchxterm< 235-1ubuntu1.1UNKNOWN

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.013 Low

EPSS

Percentile

85.8%