Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

xterm: local user unauthorized access

Package(s):

xterm

CVE #(s):

CVE-2007-2797

Created:

August 27, 2007

Updated:

November 15, 2007

Description:

Previous versions of the xterm package assigned incorrect ownership and write permissions to pseudo-terminal devices, permitting local users to direct output to other users' xterm sessions.

Alerts:

Red Hat	RHSA-2007:0701-02	2007-11-15
rPath	rPSA-2007-0169-1	2007-08-23
Foresight	FLEA-2007-0048-1	2007-08-23

(Log in to post comments)

xterm: local user unauthorized access

Posted Oct 10, 2007 18:52 UTC (Wed) by kreutzm (guest, #4700) [Link]

Debian Sarge and Etch are not vulnerable.