Multiple terminal emulators problems
Published:		25.02.2003
Source:		BUGTRAQ
SecurityVulns ID:		2614
Type:		remote
Level:		6/10
Description:		By inserting secape sequences into terminal session (via log files, e-mail, etc) it's possible to force client into performing a set of operation, like sending control command to server, create a file, etc.

Affected:		ETERM : eterm 0.9
		XFREE : XFree86 4.2
		PUTTY : putty 0.53
		ATERM : aterm 0.42
		RXVT : rxvt 2.7
		KONSOLE : konsole 3.1
		VANDYKE : SecureCRT 3.4
		HANTERM : hanterm-xf 2.0
		GNOME : gnome-terminal 2.0
		VTE : vte 0.10

Original document

H D Moore, Terminal Emulator Security Issues (25.02.2003)

Discuss:

Read or add your comments to this news (0 comments)