|
|
Info |
Last Modified |
| 6 months ago |
|
|
|
|
Description |
Hanterm-xf contains a flaw that may allow a malicious user to execute arbitrary commands. The issue is triggered when a user inadvertantly opens up a text file containing commands and malformed escape charaters, as a result this could modify the Windows title and result in the commands being added in the command line of the terminal windows where they could be executed if the user presses Enter. It is possible that the flaw may allow execution of arbitrary code resulting in a loss of confidentiality and integrity.
|
|
Classification |
Location:
Remote/Network Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Confidentiality,
Loss of Integrity
Exploit:
Exploit Available
Disclosure:
OSVDB Verified
|
|
Solution |
Upgrade to version 2.0.5 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
|
|
Products |
|
Hanterm-xf
 |
2.0 |
|
|
|
|
|
|
Credit |
- H D Moore - fdlist
 digitaloffense.net - The Metasploit Project
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
