xterm: command execution and denial of service [LWN.net]

Package(s):

XFree86 xterm

CVE #(s):

CAN-2001-1409 CAN-2002-1472 CAN-2002-0164 CAN-2003-0063 CAN-2003-0071

Created:

June 25, 2003

Updated:

July 2, 2003

Description:

A couple of new vulnerabilities have been found in the xterm application shipped with XFree86. There is yet another "execute arbitrary commands by setting the window title" vulnerability, along with a bug which can allow an attacker to lock up an exterm window.

Alerts:

Red Hat	RHSA-2003:067-02	2003-07-01
Red Hat	RHSA-2003:064-01	2003-06-25
Red Hat	RHSA-2003:067-01	2003-06-25
Red Hat	RHSA-2003:066-01	2003-06-25

(Log in to post comments)