5
CVSSv2

CVE-2000-0476

Published: 01/06/2000 Updated: 10/09/2008
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

xterm, Eterm, and rxvt allow an malicious user to cause a denial of service by embedding certain escape characters which force the window to be resized.

Vulnerable Product Search on Vulmon Subscribe to Product

putty putty 0.48

xfree86 project x11r6 3.3.3

xfree86 project x11r6 4.0

michael jennings eterm 0.8.10

rxvt rxvt 2.6.1

Exploits

source: wwwsecurityfocuscom/bid/1298/info xterm is a popular X11-based terminal emulator If VT control-characters are displayed in the xterm, they can be interpreted and used to cause a denial of service attack against the client (and even the host running the client) What makes it possible for remote users to exploit this vulnerability ...