Info

Disclosure

Jun 06, 2003

Discovery

Feb 24, 2003

Dates

Exploit

Jun 06, 2003

Solution

Unknown

Description

Hanterm-xf contains a flaw that may allow a remote denial of service. The issue is triggered when malformed escape sequences are injected into a user's terminal emulator session by an attacker and cause the terminal emulator to enter into a loop and crash, resulting in loss of availability for the platform.

Classification

Location: Remote / Network Access
Attack Type: Denial of Service
Impact: Loss of Availability
Disclosure: OSVDB Verified

Solution

Upgrade to version 2.0.5 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Hanterm-xf

2.0

References

ISS X-Force ID: 11415
CVE ID: 2003-0079 (see also: NVD)
Related OSVDB ID: 4917
Bugtraq ID: 6944
Keyword: DEC escape Hanterm Hanterm-xf sequences UDK
Mail List Post: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html
Other Advisory URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0071
http://www.debian.org/security/2003/dsa-380
Other Solution URL: http://www.redhat.com/archives/redhat-watch-list/2003-June/msg00004.html
CIAC Advisory: n-110
RedHat RHSA: RHSA-2003:071-12

Credit

H D Moore - hdmmetasploit.com - DigitalOffense

Direct URL: http://osvdb.org/4918