CVE-2007-2797 xterm, including 192-7.el4 in Red Hat Enterprise Linux and 208-3.1 in Debian GNU/Linux, sets the wrong group ownership of tty devices, which allows local users to write data to other users' terminals.
LowCVSS 2.1
EPSS 0.40%
- Published
- Updated
- Exploit status
- No public exploit known
Description
xterm, including 192-7.el4 in Red Hat Enterprise Linux and 208-3.1 in Debian GNU/Linux, sets the wrong group ownership of tty devices, which allows local users to write data to other users' terminals.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xterm | = 192-7.el4 | No fix listed |
| xterm | = 208-3.1 | No fix listed |
References
- bugs.debian.org
- 26562 patch third-party-advisory vendor-advisory
- 27617 third-party-advisory
- 27921 third-party-advisory
- 3066 third-party-advisory
- support.avaya.com
- RHSA-2007:0701 vendor-advisory
- 20070823 rPSA-2007-0169-1 xterm mailing-list
- 20070823 FLEA-2007-0048-1 xterm mailing-list
- 26710 vdb-entry
- bugzilla.redhat.com
- issues.rpath.com
- oval:org.mitre.oval:def:10421 signature vdb-entry
- Debian Security Tracker CVE-2007-2797 vendor-advisory