CVE-2003-0021 The "screen dump" feature in Eterm 0.9.1 and earlier allows attackers to overwrite arbitrary files via a certain character escape sequence when it is echoed to a user's terminal, e.g. when the user vi...
MediumCVSS 5.0
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The "screen dump" feature in Eterm 0.9.1 and earlier allows attackers to overwrite arbitrary files via a certain character escape sequence when it is echoed to a user's terminal, e.g. when the user views a file containing the malicious sequence.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| michael jennings eterm | = 0.8.10 | No fix listed |
| michael jennings eterm | = 0.9.1 | No fix listed |
| debian/eterm(Debian:12) | < 0.9.2-1 | 0.9.2-1 |
| debian/eterm(Debian:14) | < 0.9.2-1 | 0.9.2-1 |
| debian/eterm(Debian:14) | = 0.7-1 | No fix listed |
| debian/eterm(Debian:14) | = 0.8.10-10 | No fix listed |
| debian/eterm(Debian:14) | = 0.8.7-0.4 | No fix listed |
| debian/eterm(Debian:14) | = 0.8.7-0.4.1 | No fix listed |
| debian/eterm(Debian:14) | = 0.9.2-0pre2002042903 | No fix listed |
| debian/eterm(Debian:14) | = 0.9.2-0pre2002042903.3 | No fix listed |
References
- 20030224 Terminal Emulator Security Issues mailing-list vendor-advisory
- 20030224 Terminal Emulator Security Issues mailing-list
- terminal-emulator-screen-dump(11413) vdb-entry vendor-advisory
- MDKSA-2003:040 vendor-advisory
- 6936 vdb-entry
- Debian Security Tracker CVE-2003-0021 vendor-advisory