Описание
The "screen dump" feature in Eterm 0.9.1 and earlier allows attackers to overwrite arbitrary files via a certain character escape sequence when it is echoed to a user's terminal, e.g. when the user views a file containing the malicious sequence.
Ссылки
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:michael_jennings:eterm:0.8.10:*:*:*:*:*:*:*
cpe:2.3:a:michael_jennings:eterm:0.9.1:*:*:*:*:*:*:*
EPSS
Процентиль: 69%
0.00615
Низкий
5 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
debian
больше 22 лет назад
The "screen dump" feature in Eterm 0.9.1 and earlier allows attackers ...
github
больше 3 лет назад
The "screen dump" feature in Eterm 0.9.1 and earlier allows attackers to overwrite arbitrary files via a certain character escape sequence when it is echoed to a user's terminal, e.g. when the user views a file containing the malicious sequence.
EPSS
Процентиль: 69%
0.00615
Низкий
5 Medium
CVSS2
Дефекты
NVD-CWE-Other