medium5.0Public exploit code
CVE-2000-0476
xterm, Eterm, and rxvt allow an attacker to cause a denial of service by embedding certain escape characters which force the window to be resized.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Eterm 0.8.10 / rxvt 2.6.1 / PuTTY 0.48 / X11R6 3.3.3/4.0 - Denial of Service2000-05-31 · dos · multiple · Verified
Impact
xterm, Eterm, and rxvt allow an attacker to cause a denial of service by embedding certain escape characters which force the window to be resized.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Michael Jennings | Eterm | Version 0.8.10 |
| Putty | Putty | Version 0.48 |
| Rxvt | Rxvt | Version 2.6.1 |
| Xfree86 Project | X11r6 | Versions 3.3.3, 4.0 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2000-05/0409.html
- http://archives.neohapsis.com/archives/bugtraq/2000-05/0420.html
- http://www.openwall.com/lists/oss-security/2024/06/09/1
- http://www.openwall.com/lists/oss-security/2024/06/09/2
- http://www.securityfocus.com/bid/1298
- http://archives.neohapsis.com/archives/bugtraq/2000-05/0409.html
- http://archives.neohapsis.com/archives/bugtraq/2000-05/0420.html
- http://www.openwall.com/lists/oss-security/2024/06/09/1
- http://www.openwall.com/lists/oss-security/2024/06/09/2
- http://www.securityfocus.com/bid/1298