3.7

CVE-2008-1142

rxvt 2.6.4 opens a terminal window on :0 if the DISPLAY environment variable is not set, which might allow local users to hijack X11 connections.  NOTE: it was later reported that rxvt-unicode, mrxvt, aterm, multi-aterm, and wterm are also affected.  NOTE: realistic attack scenarios require that the victim enters a command on the wrong machine.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Aterm ≫ Aterm Version <= 1.0.0
Aterm ≫ Aterm Version 0.1.0
Aterm ≫ Aterm Version 0.1.1
Aterm ≫ Aterm Version 0.2.0
Aterm ≫ Aterm Version 0.3.0
Aterm ≫ Aterm Version 0.3.1
Aterm ≫ Aterm Version 0.3.2
Aterm ≫ Aterm Version 0.3.3
Aterm ≫ Aterm Version 0.3.4
Aterm ≫ Aterm Version 0.3.5
Aterm ≫ Aterm Version 0.3.6
Aterm ≫ Aterm Version 0.4.0
Aterm ≫ Aterm Version 0.4.1
Aterm ≫ Aterm Version 0.4.2
Aterm ≫ Aterm Version 1.00 Update beta1
Aterm ≫ Aterm Version 1.00 Update beta2
Aterm ≫ Aterm Version 1.00 Update beta3
Aterm ≫ Aterm Version 1.00 Update beta4
Eterm ≫ Eterm Version <= 0.9.3
Eterm ≫ Eterm Version 0.9.2
Mrxvt ≫ Mrxvt Version <= 0.5.2
Mrxvt ≫ Mrxvt Version 0.4.2
Multi-aterm ≫ Multi-aterm Version <= 0.2
Multi-aterm ≫ Multi-aterm Version 0.0.1
Multi-aterm ≫ Multi-aterm Version 0.0.3
Multi-aterm ≫ Multi-aterm Version 0.0.4
Multi-aterm ≫ Multi-aterm Version 0.0.5
Multi-aterm ≫ Multi-aterm Version 0.1
Rxvt ≫ Rxvt Version <= 2.7.9
Rxvt ≫ Rxvt Version 2.6.1
Rxvt ≫ Rxvt Version 2.6.2
Rxvt ≫ Rxvt Version 2.6.3
Rxvt ≫ Rxvt Version 2.6.4
Rxvt ≫ Rxvt Version 2.7.5
Rxvt ≫ Rxvt Version 2.7.6
Rxvt ≫ Rxvt Version 2.7.7
Rxvt ≫ Rxvt Version 2.7.8
Rxvt-unicode ≫ Rxvt-unicode Version <= 9.01
Rxvt-unicode ≫ Rxvt-unicode Version 1.0
Rxvt-unicode ≫ Rxvt-unicode Version 1.1
Rxvt-unicode ≫ Rxvt-unicode Version 1.2
Rxvt-unicode ≫ Rxvt-unicode Version 1.3
Rxvt-unicode ≫ Rxvt-unicode Version 1.4
Rxvt-unicode ≫ Rxvt-unicode Version 1.5
Rxvt-unicode ≫ Rxvt-unicode Version 1.6
Rxvt-unicode ≫ Rxvt-unicode Version 1.7
Rxvt-unicode ≫ Rxvt-unicode Version 1.8
Rxvt-unicode ≫ Rxvt-unicode Version 1.9
Rxvt-unicode ≫ Rxvt-unicode Version 1.91
Rxvt-unicode ≫ Rxvt-unicode Version 2.0
Rxvt-unicode ≫ Rxvt-unicode Version 2.1
Rxvt-unicode ≫ Rxvt-unicode Version 2.2
Rxvt-unicode ≫ Rxvt-unicode Version 2.3
Rxvt-unicode ≫ Rxvt-unicode Version 2.4
Rxvt-unicode ≫ Rxvt-unicode Version 2.5
Rxvt-unicode ≫ Rxvt-unicode Version 2.6
Rxvt-unicode ≫ Rxvt-unicode Version 2.7
Rxvt-unicode ≫ Rxvt-unicode Version 2.8
Rxvt-unicode ≫ Rxvt-unicode Version 2.9
Rxvt-unicode ≫ Rxvt-unicode Version 3.0
Rxvt-unicode ≫ Rxvt-unicode Version 3.1
Rxvt-unicode ≫ Rxvt-unicode Version 3.2
Rxvt-unicode ≫ Rxvt-unicode Version 3.3
Rxvt-unicode ≫ Rxvt-unicode Version 3.4
Rxvt-unicode ≫ Rxvt-unicode Version 3.5
Rxvt-unicode ≫ Rxvt-unicode Version 3.6
Rxvt-unicode ≫ Rxvt-unicode Version 3.7
Rxvt-unicode ≫ Rxvt-unicode Version 3.8
Rxvt-unicode ≫ Rxvt-unicode Version 3.9
Rxvt-unicode ≫ Rxvt-unicode Version 4.0
Rxvt-unicode ≫ Rxvt-unicode Version 4.1
Rxvt-unicode ≫ Rxvt-unicode Version 4.2
Rxvt-unicode ≫ Rxvt-unicode Version 4.3
Rxvt-unicode ≫ Rxvt-unicode Version 4.4
Rxvt-unicode ≫ Rxvt-unicode Version 4.5
Rxvt-unicode ≫ Rxvt-unicode Version 4.6
Rxvt-unicode ≫ Rxvt-unicode Version 4.7
Rxvt-unicode ≫ Rxvt-unicode Version 4.8
Rxvt-unicode ≫ Rxvt-unicode Version 4.9
Rxvt-unicode ≫ Rxvt-unicode Version 5.0
Rxvt-unicode ≫ Rxvt-unicode Version 5.1
Rxvt-unicode ≫ Rxvt-unicode Version 5.2
Rxvt-unicode ≫ Rxvt-unicode Version 5.3
Rxvt-unicode ≫ Rxvt-unicode Version 5.4
Rxvt-unicode ≫ Rxvt-unicode Version 5.5
Rxvt-unicode ≫ Rxvt-unicode Version 5.6
Rxvt-unicode ≫ Rxvt-unicode Version 5.7
Rxvt-unicode ≫ Rxvt-unicode Version 5.8
Rxvt-unicode ≫ Rxvt-unicode Version 5.9
Rxvt-unicode ≫ Rxvt-unicode Version 6.0
Rxvt-unicode ≫ Rxvt-unicode Version 6.1
Rxvt-unicode ≫ Rxvt-unicode Version 6.2
Rxvt-unicode ≫ Rxvt-unicode Version 6.3
Rxvt-unicode ≫ Rxvt-unicode Version 7.0
Rxvt-unicode ≫ Rxvt-unicode Version 7.1
Rxvt-unicode ≫ Rxvt-unicode Version 7.2
Rxvt-unicode ≫ Rxvt-unicode Version 7.3
Rxvt-unicode ≫ Rxvt-unicode Version 7.4
Rxvt-unicode ≫ Rxvt-unicode Version 7.5
Rxvt-unicode ≫ Rxvt-unicode Version 7.6
Rxvt-unicode ≫ Rxvt-unicode Version 7.7
Rxvt-unicode ≫ Rxvt-unicode Version 7.8
Rxvt-unicode ≫ Rxvt-unicode Version 7.9
Rxvt-unicode ≫ Rxvt-unicode Version 8.0
Rxvt-unicode ≫ Rxvt-unicode Version 8.1
Rxvt-unicode ≫ Rxvt-unicode Version 8.2
Rxvt-unicode ≫ Rxvt-unicode Version 8.3
Rxvt-unicode ≫ Rxvt-unicode Version 8.4
Rxvt-unicode ≫ Rxvt-unicode Version 8.5
Rxvt-unicode ≫ Rxvt-unicode Version 8.5a
Rxvt-unicode ≫ Rxvt-unicode Version 8.6
Rxvt-unicode ≫ Rxvt-unicode Version 8.7
Rxvt-unicode ≫ Rxvt-unicode Version 8.8
Rxvt-unicode ≫ Rxvt-unicode Version 8.9
Rxvt-unicode ≫ Rxvt-unicode Version 9.0
Wterm ≫ Wterm Version <= 6.2.8a2
Wterm ≫ Wterm Version 6.2.5
Wterm ≫ Wterm Version 6.2.6
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.36% 0.28
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 3.7 1.9 6.4
AV:L/AC:H/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html
http://secunia.com/advisories/31687
Vendor Advisory
http://article.gmane.org/gmane.comp.security.oss.general/122
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=469296
Vendor Advisory
http://secunia.com/advisories/29576
Vendor Advisory
http://secunia.com/advisories/30224
Vendor Advisory
http://secunia.com/advisories/30225
Vendor Advisory
http://secunia.com/advisories/30226
Vendor Advisory
http://secunia.com/advisories/30227
Vendor Advisory
http://secunia.com/advisories/30229
Vendor Advisory
http://security.gentoo.org/glsa/glsa-200805-03.xml
http://www.mandriva.com/security/advisories?name=MDVSA-2008:161
http://www.mandriva.com/security/advisories?name=MDVSA-2008:221
http://www.securityfocus.com/bid/28512
Patch