News for hackers. Stuff that matters.

A comment on CVE-2021-27135: xterm flaw may allow remote code execution, CVSS 9.6. Parent comment

Re:CVE-2021-27135: xterm flaw may allow remote code executio... by formerly_proven on Saturday March 20, 2021 @02:28PM (#26524981)
> An attack vector might look like

SSHing into a host is probably sufficient and often crosses a "higher to lower" security boundary.

[ Parent | on HN ]
Re:CVE-2021-27135: xterm flaw may allow remote code executio... by kstrauser on Saturday March 20, 2021 @02:30PM (#26524993)
Very true. There are a million ways to get text displayed on someone’s terminal.
[ Parent | on HN ]
Re:CVE-2021-27135: xterm flaw may allow remote code executio... by tptacek on Saturday March 20, 2021 @03:41PM (#26525587)
Which, of course, as we now know, isn't enough to trigger this vulnerability.
[ Parent | on HN ]