PT-2003-1087 · N/A · Hanterm

H D Moore · Published 2003-03-03 · Updated 2016-10-18 · CVE-2003-0079

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions hanterm versions prior to 2.0.5

Description The issue allows attackers to cause a denial of service via a certain character escape sequence that causes the terminal to enter a tight loop. Multiple vulnerabilities in the hanterm-xf package may lead to breaches of confidentiality, integrity, and availability of protected information, and can be exploited remotely.

Recommendations For versions prior to 2.0.5, update to version 2.0.5 or later to resolve the issue. As a temporary workaround, consider restricting the use of the DEC UDK processing feature in the hanterm terminal emulator until a patch is available.

Fix

Related Identifiers

BDU:2015-08015

CVE-2003-0079

Affected Products

Hanterm

References · 10

• http://iss.net/security_center/static/11415.php · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2003-071.html · Vendor Advisory
• http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-0079 · Security Note
• http://redhat.com/support/errata/RHSA-2003-070.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-08015 · Security Note
• http://securityfocus.com/bid/6944 · Note
• http://osvdb.org/4918 · Note
• https://rhn.redhat.com/errata/RHSA-2003-070.html · Note
• http://marc.info/?l=bugtraq&m=104612710031920&w=2 · Note