Summary
The remote host is missing an update to eterm
announced via advisory DSA 496-1.
Solution
https://secure1.securityspace.com/smysecure/catid.html?in=DSA%20496-1
Insight
H.D. Moore discovered several terminal emulator security issues. One of them covers escape codes that are interepreted by the terminal emulator. This could be exploited by an attacker to insert malicious commands hidden for the user, who has to hit enter to continue, which would also execute the hidden commands.
For the stable distribution (woody) this problem has been fixed in version 0.9.2-0pre2002042903.3.
For the unstable distribution (sid) this problem has been fixed in version eterm-0.9.2-6.
We recommend that you upgrade your eterm package.
Severity
Classification
-
CVE CVE-2003-0068 -
CVSS Base Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities