Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-7236. PoCs published by Paul Szabo.
AI-analyzed exploit summary This exploit leverages a command injection vulnerability in xterm by embedding escape sequences in a log file. When the log is displayed in xterm, it executes arbitrary commands due to insufficient input validation.
Description
The default configuration of xterm on Debian GNU/Linux sid and possibly Ubuntu enables the allowWindowOps resource, which allows user-assisted attackers to execute arbitrary code or have unspecified other impact via escape sequences.
Exploits (1)
This exploit leverages a command injection vulnerability in xterm by embedding escape sequences in a log file. When the log is displayed in xterm, it executes arbitrary commands due to insufficient input validation.