rxvt 2.6.4 opens a terminal window on :0 if the DISPLAY environment variable is not set, which might allow local users to hijack X11 connections. NOTE: it was later reported that rxvt-unicode, mrxvt, aterm, multi-aterm, and wterm are also affected. NOTE: realistic attack scenarios require that the victim enters a command on the wrong machine.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2008-04-07T17:00:00
Updated: 2008-05-13T09:00:00
Reserved: 2008-03-04T00:00:00
Link: CVE-2008-1142
JSON object: View
NVD Information
Status : Analyzed
Published: 2008-04-07T17:44:00.000
Modified: 2009-02-26T05:00:00.000
Link: CVE-2008-1142
JSON object: View
Redhat Information
No data.
CWE