The default configuration of xterm on Debian GNU/Linux sid and possibly Ubuntu enables the allowWindowOps resource, which allows user-assisted attackers to execute arbitrary code or have unspecified other impact via escape sequences.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2009-01-02T18:00:00
Updated: 2024-08-07T20:57:40.715Z
Reserved: 2009-01-02T00:00:00
Link: CVE-2006-7236
Vulnrichment
No data.
NVD
Status : Modified
Published: 2009-01-02T18:11:09.453
Modified: 2024-11-21T00:24:42.287
Link: CVE-2006-7236
Redhat
No data.