Description
The "screen dump" feature in Eterm 0.9.1 and earlier allows attackers to overwrite arbitrary files via a certain character escape sequence when it is echoed to a user's terminal, e.g. when the user views a file containing the malicious sequence.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | eterm | 0.9.2-1 | — |
| Debian 12 | eterm | 0.9.2-1 | — |
References
- 20030224 Terminal Emulator Security Issues mailing-list
- MDKSA-2003:040 vendor-advisory
- terminal-emulator-screen-dump(11413) vdb-entry
- 20030224 Terminal Emulator Security Issues mailing-list
- 6936 vdb-entry