Red Hat Security AdvisoryRHSA-2009:0018
xterm security update
Released 2009-01-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 xterm-179-11.EL3, xterm-179-11.EL3.i386
- Red Hat Enterprise Linux (v. 5 server) xterm-215-5.el5_2.2, xterm-215-5.el5_2.2.i386, xterm-215-5.el5_2.2.ia64 +1
- Red Hat Enterprise Linux AS version 3 xterm-179-11.EL3, xterm-179-11.EL3.i386, xterm-179-11.EL3.ia64 +1
- Red Hat Enterprise Linux AS version 4 xterm-192-8.el4_7.2, xterm-192-8.el4_7.2.i386, xterm-192-8.el4_7.2.ia64 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) xterm-215-5.el5_2.2, xterm-215-5.el5_2.2.i386
- Red Hat Enterprise Linux Desktop version 4 xterm-192-8.el4_7.2, xterm-192-8.el4_7.2.i386
- Red Hat Enterprise Linux ES version 3 xterm-179-11.EL3, xterm-179-11.EL3.i386, xterm-179-11.EL3.ia64
- Red Hat Enterprise Linux ES version 4 xterm-192-8.el4_7.2, xterm-192-8.el4_7.2.i386, xterm-192-8.el4_7.2.ia64
- Red Hat Enterprise Linux WS version 3 xterm-179-11.EL3, xterm-179-11.EL3.i386, xterm-179-11.EL3.ia64
- Red Hat Enterprise Linux WS version 4 xterm-192-8.el4_7.2, xterm-192-8.el4_7.2.i386, xterm-192-8.el4_7.2.ia64
Fixes 1 record
Priority MEDIUM 48
CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \n) characters surrounding a command name within a Device Control Request Status String (DECRQSS) escape sequ…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.04934 · Published 2009-01-02 · Fixed CWE-94
