Unrated severityNVD Advisory· Published Jan 2, 2009· Updated Jun 16, 2026
CVE-2008-2383
CVE-2008-2383
Description
CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \n) characters surrounding a command name within a Device Control Request Status String (DECRQSS) escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:invisible-island:xterm:_nil_:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
28- secunia.com/advisories/33318nvdVendor Advisory
- www.us-cert.gov/cas/techalerts/TA09-133A.htmlnvdUS Government Resource
- bugs.debian.org/cgi-bin/bugreport.cginvd
- lists.apple.com/archives/security-announce/2009/May/msg00002.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.htmlnvd
- secunia.com/advisories/33388nvd
- secunia.com/advisories/33397nvd
- secunia.com/advisories/33418nvd
- secunia.com/advisories/33419nvd
- secunia.com/advisories/33568nvd
- secunia.com/advisories/33820nvd
- secunia.com/advisories/35074nvd
- sunsolve.sun.com/search/document.donvd
- support.apple.com/kb/HT3549nvd
- www.debian.org/security/2009/dsa-1694nvd
- www.redhat.com/support/errata/RHSA-2009-0018.htmlnvd
- www.redhat.com/support/errata/RHSA-2009-0019.htmlnvd
- www.securityfocus.com/bid/33060nvd
- www.securitytracker.com/idnvd
- www.vupen.com/english/advisories/2009/1297nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/47655nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3E2Q6NPKT7V4VKZMSFF4ARLRVYOG4AU/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOOVZTIABA4MIFUGTAVYWO6QXSUXSST4/nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9317nvd
- usn.ubuntu.com/703-1/nvd
- www.redhat.com/archives/fedora-package-announce/2009-January/msg00072.htmlnvd
- www.redhat.com/archives/fedora-package-announce/2009-January/msg00184.htmlnvd
News mentions
0No linked articles in our index yet.