critical9.3Public exploit code
CVE-2006-7236
The default configuration of xterm on Debian GNU/Linux sid and possibly Ubuntu enables the allowWindowOps resource, which allows user-assisted attackers to exe…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- xterm - DECRQSS Remote Command Execution2008-12-29 · remote · linux · Verified
Impact
The default configuration of xterm on Debian GNU/Linux sid and possibly Ubuntu enables the allowWindowOps resource, which allows user-assisted attackers to execute arbitrary code or have unspecified other impact via escape sequences.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Invisible-Island | Xterm | Version _nil_ |
Weakness classification
References
- NVD record
- CVE.org record
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=384593
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=510030
- http://secunia.com/advisories/33388
- https://usn.ubuntu.com/703-1/
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=384593
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=510030
- http://secunia.com/advisories/33388
- https://usn.ubuntu.com/703-1/