PT-2003-1120 · Xfree86+1 · Xterm+2
H D Moore
·
Publicado
2003-03-03
·
Atualizado
2023-07-27
·
CVE-2003-0071
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
XFree86-xf86cfg versions 4.1.0 through 4.2.1
XFree86-font-utils versions 4.1.0 through 4.2.1-21
XFree86-ISO8859-9-75dpi-fonts versions 4.1.0 through 4.2.1-21
XFree86-tools versions 4.1.0 through 4.2.1-21
XFree86-devel versions 4.1.0 through 4.2.1-21
XFree86-75dpi-fonts versions 4.1.0 through 4.2.1-21
XFree86-cyrillic-fonts versions 4.1.0 through 4.2.1-21
XFree86-doc versions 4.1.0 through 4.2.1-21
XFree86-xdm versions 4.1.0 through 4.2.1-21
XFree86-ISO8859-15-100dpi-fonts versions 4.1.0 through 4.2.1-21
XFree86-ISO8859-2-100dpi-fonts versions 4.1.0 through 4.2.1-21
XFree86-100dpi-fonts versions 4.1.0 through 4.2.1-21
XFree86-libs versions 4.1.0 through 4.2.1-21
XFree86-xfs versions 4.1.0 through 4.2.1-21
XFree86-Xnest versions 4.1.0 through 4.2.1-21
XFree86-twm versions 4.1.0 through 4.2.1-21
XFree86-Mesa-libGL versions 4.1.0 through 4.2.1-21
XFree86-Mesa-libGLU versions 4.1.0 through 4.2.1-21
XFree86-truetype-fonts versions 4.1.0 through 4.2.1-21
XFree86-base-fonts versions 4.1.0 through 4.2.1-21
XFree86-Xvfb versions 4.1.0 through 4.2.1-21
XFree86-xauth versions 4.1.0 through 4.2.1-21
Description
The XFree86 package in Red Hat Linux contains multiple vulnerabilities that can be exploited remotely, leading to a violation of confidentiality, integrity, and availability of protected information. The vulnerabilities can be exploited by attackers to cause a denial of service or potentially gain unauthorized access. The issue is related to the DEC UDK processing feature in the xterm terminal emulator, which allows attackers to cause the terminal to enter a tight loop using a certain character escape sequence.
Recommendations
As a temporary workaround, consider disabling the
xterm terminal emulator until a patch is available.
Restrict access to the vulnerable XFree86 packages to minimize the risk of exploitation.
Avoid using the xterm terminal emulator in the affected XFree86 versions until the issue is resolved.
At the moment, there is no information about a newer version that contains a fix for this vulnerability. Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Red Hat
Xfree86
Xterm