CVE-2000-0476

Description

xterm, Eterm, and rxvt allow an attacker to cause a denial of service by embedding certain escape characters which force the window to be resized.

Affected products

• michael_jennings / eterm0.8.10 – 0.8.10
• putty / putty0.48 – 0.48
• rxvt / rxvt2.6.1 – 2.6.1
• xfree86_project / x11r63.3.3 – 3.3.3
• xfree86_project / x11r64.0 – 4.0

Exploits & proofs of concept

• exploit-dbEterm 0.8.10 / rxvt 2.6.1 / PuTTY 0.48 / X11R6 3.3.3/4.0 - Denial of Serviceby Kit Knox

References

• MISChttp://archives.neohapsis.com/archives/bugtraq/2000-05/0420.html
• MISChttp://archives.neohapsis.com/archives/bugtraq/2000-05/0409.html
• MISChttp://www.securityfocus.com/bid/1298
• MAILING_LISThttp://www.openwall.com/lists/oss-security/2024/06/09/1
• MAILING_LISThttp://www.openwall.com/lists/oss-security/2024/06/09/2