PT-2009-1067 · X.Org Foundation+1 · Xterm+2

Published 2009-01-02 · Updated 2024-06-15 · CVE-2008-2383

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions xterm versions prior to 239 xterm version 215 xterm version 192 xterm version 179 hanterm-xf version 2.0.5

Description The issue affects the confidentiality, integrity, and availability of protected information. It can be exploited remotely.

Recommendations For xterm versions prior to 239, update to version 239 or later. For xterm version 215, update to a version later than 215. For xterm version 192, update to a version later than 192. For xterm version 179, update to a version later than 179. For hanterm-xf version 2.0.5, update to a version later than 2.0.5.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

BDU:2015-07257

BDU:2015-07718

BDU:2015-07719

BDU:2015-07720

BDU:2015-08441

BDU:2015-08442

BDU:2015-08443

BDU:2015-09345

CVE-2008-2383

DSA-1694-1

DTSA-182-1

OPENSUSE-SU-2024:11527-1

OPENSUSE-SU-2024:13043-1

RHSA-2009:0018

RHSA-2009:0019

RHSA-2009_0018

Affected Products

Red Hat

Hanterm-Xf

Xterm

References · 49

• https://bdu.fstec.ru/vul/2015-07257 · Security Note
• https://bdu.fstec.ru/vul/2015-07718 · Security Note
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3E2Q6NPKT7V4VKZMSFF4ARLRVYOG4AU · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2008-2383 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11527-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-08442 · Security Note
• https://redhat.com/archives/fedora-package-announce/2009-January/msg00072.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2009-0019.html · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2009-January/msg00184.html · Vendor Advisory
• http://secunia.com/advisories/33318 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2009-0018.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09345 · Security Note
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOOVZTIABA4MIFUGTAVYWO6QXSUXSST4 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-08443 · Security Note
• https://usn.ubuntu.com/703-1 · Vendor Advisory