CVE

Id
6899  
CVE No.
CVE-2003-0070  
Status
Entry  
Description
VTE, as used by default in gnome-terminal terminal emulator 2.2 and as an option in gnome-terminal 2.0, allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user"s terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
39464 6899 CVE-2003-0070 VULNWATCH:20030224 Terminal Emulator Security Issues  View
39465 6899 CVE-2003-0070 URL:http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html  View
39466 6899 CVE-2003-0070 BUGTRAQ:20030224 Terminal Emulator Security Issues  View
39467 6899 CVE-2003-0070 URL:http://marc.info/?l=bugtraq&m=104612710031920&w=2  View
39468 6899 CVE-2003-0070 REDHAT:RHSA-2003:053  View
39469 6899 CVE-2003-0070 URL:http://www.redhat.com/support/errata/RHSA-2003-053.html  View
39470 6899 CVE-2003-0070 GENTOO:GLSA-200303-2  View
39471 6899 CVE-2003-0070 URL:http://seclists.org/lists/bugtraq/2003/Mar/0010.html  View
39472 6899 CVE-2003-0070 XF:terminal-emulator-window-title(11414)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63798 JVNDB-2002-000125 xterm の DEC UDK 処理におけるサービス運用妨害 (DoS) の脆弱性 ------------ CVE-2003-0071 6899 2.1 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000125.html  View