CVE-2003-0068 The Eterm terminal emulator 0.9.1 and earlier allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e....
HighCVSS 7.5
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Eterm terminal emulator 0.9.1 and earlier allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| michael jennings eterm | = 0.8.10 | No fix listed |
| michael jennings eterm | = 0.9.1 | No fix listed |
| debian/eterm(Debian:12) | < 0.9.2-6 | 0.9.2-6 |
| debian/eterm(Debian:14) | < 0.9.2-6 | 0.9.2-6 |
| debian/eterm(Debian:14) | = 0.7-1 | No fix listed |
| debian/eterm(Debian:14) | = 0.8.10-10 | No fix listed |
| debian/eterm(Debian:14) | = 0.8.7-0.4 | No fix listed |
| debian/eterm(Debian:14) | = 0.8.7-0.4.1 | No fix listed |
| debian/eterm(Debian:14) | = 0.9.2-0pre2002042903 | No fix listed |
| debian/eterm(Debian:14) | = 0.9.2-0pre2002042903.3 | No fix listed |
References
- 20030224 Terminal Emulator Security Issues mailing-list vendor-advisory
- 20030224 Terminal Emulator Security Issues mailing-list
- DSA-496 vendor-advisory
- terminal-emulator-window-title(11414) vdb-entry vendor-advisory
- MDKSA-2003:040 vendor-advisory
- 10237 vdb-entry
- Debian Security Tracker CVE-2003-0068 vendor-advisory