{"id":"CVE-2008-2383","state":"PUBLISHED","title":"CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \\n) characters surrounding a command name within a Device Control Req","description":"CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \\n) characters surrounding a command name within a Device Control Request Status String (DECRQSS) escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071.","publishedAt":"2009-01-02T00:00:00.000Z","updatedAt":"2024-08-07T08:58:02.539Z","severity":null,"assigner":"mitre","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["http://secunia.com/advisories/33419","http://www.redhat.com/support/errata/RHSA-2009-0018.html","http://sunsolve.sun.com/search/document.do?assetkey=1-66-254208-1","https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00184.html","http://www.redhat.com/support/errata/RHSA-2009-0019.html","http://secunia.com/advisories/33388","http://support.apple.com/kb/HT3549","http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00072.html","https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9317","http://secunia.com/advisories/35074","http://secunia.com/advisories/33418","http://www.debian.org/security/2009/dsa-1694","http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html","http://secunia.com/advisories/33318","http://secunia.com/advisories/33568","https://exchange.xforce.ibmcloud.com/vulnerabilities/47655","http://www.us-cert.gov/cas/techalerts/TA09-133A.html","http://secunia.com/advisories/33397","http://www.vupen.com/english/advisories/2009/1297","http://www.securityfocus.com/bid/33060","https://usn.ubuntu.com/703-1/","http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=510030","http://secunia.com/advisories/33820","http://www.securitytracker.com/id?1021522","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOOVZTIABA4MIFUGTAVYWO6QXSUXSST4/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3E2Q6NPKT7V4VKZMSFF4ARLRVYOG4AU/"],"weaknesses":[],"ingestedAt":"2026-10-29T19:38:54.183Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2008/2xxx/CVE-2008-2383.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2008-2383","state":"PUBLISHED","datePublished":"2009-01-02T00:00:00.000Z","dateUpdated":"2024-08-07T08:58:02.539Z","assignerShortName":"mitre","assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateReserved":"2008-05-21T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \\n) characters surrounding a command name within a Device Control Request Status String (DECRQSS) escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"http://secunia.com/advisories/33419","name":"33419","tags":["third-party-advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0018.html","name":"RHSA-2009:0018","tags":["vendor-advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-254208-1","name":"254208","tags":["vendor-advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00184.html","name":"FEDORA-2009-0154","tags":["vendor-advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0019.html","name":"RHSA-2009:0019","tags":["vendor-advisory"]},{"url":"http://secunia.com/advisories/33388","name":"33388","tags":["third-party-advisory"]},{"url":"http://support.apple.com/kb/HT3549"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","name":"SUSE-SR:2009:003","tags":["vendor-advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00072.html","name":"FEDORA-2009-0059","tags":["vendor-advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9317","name":"oval:org.mitre.oval:def:9317","tags":["vdb-entry","signature"]},{"url":"http://secunia.com/advisories/35074","name":"35074","tags":["third-party-advisory"]},{"url":"http://secunia.com/advisories/33418","name":"33418","tags":["third-party-advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1694","name":"DSA-1694","tags":["vendor-advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","name":"APPLE-SA-2009-05-12","tags":["vendor-advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html","name":"SUSE-SR:2009:002","tags":["vendor-advisory"]},{"url":"http://secunia.com/advisories/33318","name":"33318","tags":["third-party-advisory"]},{"url":"http://secunia.com/advisories/33568","name":"33568","tags":["third-party-advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47655","name":"xterm-decrqss-code-execution(47655)","tags":["vdb-entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","name":"TA09-133A","tags":["third-party-advisory"]},{"url":"http://secunia.com/advisories/33397","name":"33397","tags":["third-party-advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","name":"ADV-2009-1297","tags":["vdb-entry"]},{"url":"http://www.securityfocus.com/bid/33060","name":"33060","tags":["vdb-entry"]},{"url":"https://usn.ubuntu.com/703-1/","name":"USN-703-1","tags":["vendor-advisory"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=510030"},{"url":"http://secunia.com/advisories/33820","name":"33820","tags":["third-party-advisory"]},{"url":"http://www.securitytracker.com/id?1021522","name":"1021522","tags":["vdb-entry"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOOVZTIABA4MIFUGTAVYWO6QXSUXSST4/","name":"FEDORA-2023-a004ecb3f8","tags":["vendor-advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3E2Q6NPKT7V4VKZMSFF4ARLRVYOG4AU/","name":"FEDORA-2023-3746647cc3","tags":["vendor-advisory"]}],"problemTypes":[{"descriptions":[{"type":"text","lang":"en","description":"n/a"}]}],"providerMetadata":{"shortName":"mitre","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateUpdated":"2023-07-27T00:00:00.000Z"},"datePublic":"2008-12-30T00:00:00.000Z"},"adp":[{"title":"CVE Program Container","references":[{"url":"http://secunia.com/advisories/33419","name":"33419","tags":["third-party-advisory","x_transferred"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0018.html","name":"RHSA-2009:0018","tags":["vendor-advisory","x_transferred"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-254208-1","name":"254208","tags":["vendor-advisory","x_transferred"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00184.html","name":"FEDORA-2009-0154","tags":["vendor-advisory","x_transferred"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0019.html","name":"RHSA-2009:0019","tags":["vendor-advisory","x_transferred"]},{"url":"http://secunia.com/advisories/33388","name":"33388","tags":["third-party-advisory","x_transferred"]},{"url":"http://support.apple.com/kb/HT3549","tags":["x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","name":"SUSE-SR:2009:003","tags":["vendor-advisory","x_transferred"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00072.html","name":"FEDORA-2009-0059","tags":["vendor-advisory","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9317","name":"oval:org.mitre.oval:def:9317","tags":["vdb-entry","signature","x_transferred"]},{"url":"http://secunia.com/advisories/35074","name":"35074","tags":["third-party-advisory","x_transferred"]},{"url":"http://secunia.com/advisories/33418","name":"33418","tags":["third-party-advisory","x_transferred"]},{"url":"http://www.debian.org/security/2009/dsa-1694","name":"DSA-1694","tags":["vendor-advisory","x_transferred"]},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","name":"APPLE-SA-2009-05-12","tags":["vendor-advisory","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html","name":"SUSE-SR:2009:002","tags":["vendor-advisory","x_transferred"]},{"url":"http://secunia.com/advisories/33318","name":"33318","tags":["third-party-advisory","x_transferred"]},{"url":"http://secunia.com/advisories/33568","name":"33568","tags":["third-party-advisory","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47655","name":"xterm-decrqss-code-execution(47655)","tags":["vdb-entry","x_transferred"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","name":"TA09-133A","tags":["third-party-advisory","x_transferred"]},{"url":"http://secunia.com/advisories/33397","name":"33397","tags":["third-party-advisory","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","name":"ADV-2009-1297","tags":["vdb-entry","x_transferred"]},{"url":"http://www.securityfocus.com/bid/33060","name":"33060","tags":["vdb-entry","x_transferred"]},{"url":"https://usn.ubuntu.com/703-1/","name":"USN-703-1","tags":["vendor-advisory","x_transferred"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=510030","tags":["x_transferred"]},{"url":"http://secunia.com/advisories/33820","name":"33820","tags":["third-party-advisory","x_transferred"]},{"url":"http://www.securitytracker.com/id?1021522","name":"1021522","tags":["vdb-entry","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOOVZTIABA4MIFUGTAVYWO6QXSUXSST4/","name":"FEDORA-2023-a004ecb3f8","tags":["vendor-advisory","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3E2Q6NPKT7V4VKZMSFF4ARLRVYOG4AU/","name":"FEDORA-2023-3746647cc3","tags":["vendor-advisory","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-07T08:58:02.539Z"}}]}}}