RXVT-Unicode Open File Descriptor Leakage Vulnerability
BID:10959
Info
RXVT-Unicode Open File Descriptor Leakage Vulnerability
| Bugtraq ID: | 10959 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Aug 16 2004 12:00AM |
| Updated: | Aug 16 2004 12:00AM |
| Credit: | This vulnerability was reported by the vendor. |
| Vulnerable: |
Marc Lehmann RXVT-Unicode 3.5 Marc Lehmann RXVT-Unicode 3.4 |
| Not Vulnerable: |
Marc Lehmann RXVT-Unicode 3.6 |
Discussion
RXVT-Unicode Open File Descriptor Leakage Vulnerability
It is reported that RXVT-Unicode fails to properly close file descriptors when spawning new child terminal windows.
The child process could then potentially gain access to possibly sensitive information from the contents of the open file descriptors. Depending on the mode of the original file, and the privileges of the user that opened it, processes in the child window may exploit this vulnerability to take control of the parent process. Other attacks may also be possible.
An attacker requires local access to the RXVT-Unicode process window to exploit this vulnerability.
Versions prior to 3.6 are reported vulnerable to this issue.
It is reported that RXVT-Unicode fails to properly close file descriptors when spawning new child terminal windows.
The child process could then potentially gain access to possibly sensitive information from the contents of the open file descriptors. Depending on the mode of the original file, and the privileges of the user that opened it, processes in the child window may exploit this vulnerability to take control of the parent process. Other attacks may also be possible.
An attacker requires local access to the RXVT-Unicode process window to exploit this vulnerability.
Versions prior to 3.6 are reported vulnerable to this issue.
Exploit / POC
RXVT-Unicode Open File Descriptor Leakage Vulnerability
An exploit is not required.
An exploit is not required.
Solution / Fix
RXVT-Unicode Open File Descriptor Leakage Vulnerability
Solution:
The vendor has released version 3.6 to address this issue:
Marc Lehmann RXVT-Unicode 3.4
Marc Lehmann RXVT-Unicode 3.5
Solution:
The vendor has released version 3.6 to address this issue:
Marc Lehmann RXVT-Unicode 3.4
-
Marc Lehmann rxvt-unicode-3.6.tar.bz2
http://dist.schmorp.de/rxvt-unicode/rxvt-unicode-3.6.tar.bz2
Marc Lehmann RXVT-Unicode 3.5
-
Marc Lehmann rxvt-unicode-3.6.tar.bz2
http://dist.schmorp.de/rxvt-unicode/rxvt-unicode-3.6.tar.bz2
References
RXVT-Unicode Open File Descriptor Leakage Vulnerability
References:
References:
- rxvt homepage (rxvt)
- RXVT-Unicode change log (Marc Lehmann)
- RXVT-Unicode Home Page (Marc Lehmann)