rxvt-unicode before 9.20 does not properly handle OSC escape sequences, which allows user-assisted remote attackers to manipulate arbitrary X window properties and execute arbitrary commands.

rxvt-unicode was updated to ensure that window property values can not be queried in secure mode. (CVE-2014-3121)

The remote host is affected by the vulnerability described in GLSA-201406-18 (rxvt-unicode: User-assisted execution of arbitrary code)

    rxvt-unicode does not properly handle OSC escape sequences, including       those used to read and write X window properties.
  Impact :

    A remote attacker could entice a user to run a specially crafted file       using rxvt-unicode, possibly resulting in execution of arbitrary code       with the privileges of the process or a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

rxvt-unicode was patched to ensure that window property values can not be queried in secure mode (CVE-2014-3121).

Updated rxvt-unicode package fixes security vulnerability :

rxvt-unicode (aka urxvt) before 9.20 is vulnerable to a user-assisted arbitrary commands execution issue. This can be exploited by the unprocessed display of certain escape sequences in a crafted text file or program output. Arbitrary command sequences can be constructed using this, and unintentionally executed if used in conjunction with various other escape sequences (CVE-2014-3121).

- Update to 9.20:
    http://cvs.schmorp.de/rxvt-unicode/Changes

    - Fix CVE-2014-3121: user-assisted arbitrary commands       execution

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Phillip Hallam-Baker discovered that window property values could be queried in rxvt-unicode, resulting in the potential execution of arbitrary commands.

ID	Name	Product	Family	Severity
76212	SuSE 11.3 Security Update : rxvt-unicode (SAT Patch Number 9421)	Nessus	SuSE Local Security Checks	high
76154	GLSA-201406-18 : rxvt-unicode: User-assisted execution of arbitrary code	Nessus	Gentoo Local Security Checks	high
76136	openSUSE Security Update : rxvt-unicode (openSUSE-SU-2014:0814-1)	Nessus	SuSE Local Security Checks	high
74072	Mandriva Linux Security Advisory : rxvt-unicode (MDVSA-2014:094)	Nessus	Mandriva Local Security Checks	high
73954	Fedora 20 : rxvt-unicode-9.20-1.fc20 (2014-5939)	Nessus	Fedora Local Security Checks	high
73953	Fedora 19 : rxvt-unicode-9.20-1.fc19 (2014-5938)	Nessus	Fedora Local Security Checks	high
73924	Debian DSA-2925-1 : rxvt-unicode - security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2014-3121

critical

Tenable Plugins

high

high

high

high

high

high

high