Red Hat Security AdvisoryRHSA-2009:0019
hanterm-xf security update
Released 2009-01-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 hanterm-xf-1:2.0.5-5.AS21.2, hanterm-xf-1:2.0.5-5.AS21.2.i386, hanterm-xf-1:2.0.5-5.AS21.2.ia64
- Red Hat Enterprise Linux ES version 2.1 hanterm-xf-1:2.0.5-5.AS21.2, hanterm-xf-1:2.0.5-5.AS21.2.i386
- Red Hat Enterprise Linux WS version 2.1 hanterm-xf-1:2.0.5-5.AS21.2, hanterm-xf-1:2.0.5-5.AS21.2.i386
- Red Hat Linux Advanced Workstation 2.1 hanterm-xf-1:2.0.5-5.AS21.2, hanterm-xf-1:2.0.5-5.AS21.2.ia64
Fixes 1 record
Priority MEDIUM 48
CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \n) characters surrounding a command name within a Device Control Request Status String (DECRQSS) escape sequ…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.04934 · Published 2009-01-02 · Fixed CWE-94
