Summary
The remote host is missing an update to the system as announced in the referenced advisory.
Solution
Update your system with the appropriate patches or software upgrades.
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=510030 http://www.vuxml.org/freebsd/d5e1aac8-db0b-11dd-ae30-001cc0377035.html
Insight
The following package is affected: xterm
CVE-2008-2383
CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \n) characters surrounding a command name within a Device Control Request Status String (DECRQSS) escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071.
Severity
Classification
-
CVE CVE-2008-2383 -
CVSS Base Score: 9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
Related Vulnerabilities