CVE-2008-2383
CVE-2008-2383
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
Esta página muestra una selección de datos de las fuentes. Consulte los avisos enlazados para ver la descripción completa y las versiones afectadas.
CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \n) characters surrounding a command name within a Device Control Request Status String (DECRQSS) escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071.
EPSS 4,9% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
Fuentes originales
- http://secunia.com/advisories/33419
- http://www.redhat.com/support/errata/RHSA-2009-0018.html
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-254208-1
- https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00184.html
- http://www.redhat.com/support/errata/RHSA-2009-0019.html
- http://secunia.com/advisories/33388
- http://support.apple.com/kb/HT3549
- http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html
- https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00072.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9317
- http://secunia.com/advisories/35074
- http://secunia.com/advisories/33418
- http://www.debian.org/security/2009/dsa-1694
- http://lists.apple.com/archives/security-announce/2009/May/msg00002.html
- http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html
- http://secunia.com/advisories/33318
- http://secunia.com/advisories/33568
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47655
- http://www.us-cert.gov/cas/techalerts/TA09-133A.html
- http://secunia.com/advisories/33397
- http://www.vupen.com/english/advisories/2009/1297
- http://www.securityfocus.com/bid/33060
- https://usn.ubuntu.com/703-1/
- https://nvd.nist.gov/vuln/detail/CVE-2008-2383