Free and open-source vulnerability scanner

Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.

Install Now

Available for macOS, Windows, and Linux

App screenshot

Debian Security Advisory DSA 1694-2 (xterm)

Information

Severity

Severity

Critical

Family

Family

Debian Local Security Checks

CVSSv2 Base

CVSSv2 Base

9.3

CVSSv2 Vector

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Solution Type

Solution Type

Vendor Patch

Created

Created

15 years ago

Modified

Modified

6 years ago

Summary

The remote host is missing an update to xterm announced via advisory DSA 1694-2.

Insight

Insight

The xterm update in DSA-1694-1 disabled font changing as a precaution. However, users reported that they need this feature. The update in this DSA makes font shifting through escape sequences configurable, using a new allowFontOps X resource, and unconditionally enables font changing through keyboard sequences. For the stable distribution (etch), this problem has been fixed in version 222-1etch4. For the testing distribution (lenny), this problem has been fixed in version 235-2. For the unstable distribution (sid), this problem has been fixed in version 238-2. We recommend that you upgrade your xterm package.

Solution

Solution

https://secure1.securityspace.com/smysecure/catid.html?in=DSA%201694-2

Common Vulnerabilities and Exposures (CVE)