rxvt 2.6.4 opens a terminal window on :0 if the DISPLAY environment variable is not set, which might allow local users to hijack X11 connections. NOTE: it was later reported that rxvt-unicode, mrxvt, aterm, multi-aterm, and wterm are also affected. NOTE: realistic attack scenarios require that the victim enters a command on the wrong machine.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2008-04-07T17:00:00

Updated: 2024-08-07T08:08:57.701Z

Reserved: 2008-03-04T00:00:00

Link: CVE-2008-1142

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2008-04-07T17:44:00.000

Modified: 2024-11-21T00:43:46.640

Link: CVE-2008-1142

cve-icon Redhat

Severity : Low

Publid Date: 2008-03-04T00:00:00Z

Links: CVE-2008-1142 - Bugzilla