CVE-2008-1692

Related Files

Mandriva Linux Security Advisory 2008-222

Posted Oct 30, 2008

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory - A vulnerability in Eterm allowed it to open a terminal on :0 if the environment variable was not set or the -display option was not specified, which could be used by a local user to hijack X11 connections. The updated packages have been patched to correct this issue.

tags | advisory, local

systems | linux, mandriva

advisories | CVE-2008-1692

SHA-256 | 6135ff2144b6f19a3b7088ce33de499f9ede3466b9efd1cc8e21e78e79cb33a9

Download | Favorite | View

Gentoo Linux Security Advisory 200805-3

Posted May 8, 2008

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory GLSA 200805-03 - Bernhard R. Link discovered that Eterm opens a terminal on :0 if the -display option is not specified and the DISPLAY environment variable is not set. Further research by the Gentoo Security Team has shown that aterm, Mrxvt, multi-aterm, RXVT, rxvt-unicode, and wterm are also affected. Versions less than 1.0.1-r1 are affected.

tags | advisory

systems | linux, gentoo

advisories | CVE-2008-1142, CVE-2008-1692

SHA-256 | 8e597b0eb583a93f5b20705800370493675a314ae667c8c72e4033be649d542c

Download | Favorite | View