Multiple X11 Terminals Missing DISPLAY Variable Local Arbitrary Command Execution Vulnerability
BID:28512
Info
Multiple X11 Terminals Missing DISPLAY Variable Local Arbitrary Command Execution Vulnerability
| Bugtraq ID: | 28512 |
| Class: | Design Error |
| CVE: |
CVE-2008-1142 CVE-2008-1692 |
| Remote: | No |
| Local: | Yes |
| Published: | Mar 31 2008 12:00AM |
| Updated: | Nov 03 2008 05:55PM |
| Credit: | Bernhard R. Link |
| Vulnerable: |
wterm wterm 6.2.9 rxvt rxvt 2.7.10 rxvt rxvt 2.6.4 Pardus Linux 2008 0 Pardus Linux 2007 0 multi-aterm multi-aterm 0.2.1 mrxvt mrxvt 0.5.3 Marc Lehmann RXVT-Unicode 9.02 Mandriva Linux Mandrake 2008.1 x86_64 Mandriva Linux Mandrake 2008.1 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 Mandriva Linux Mandrake 2007.1 x86_64 Mandriva Linux Mandrake 2007.1 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 MandrakeSoft Corporate Server 4.0 Gentoo Linux Eterm Eterm 0.9.4 Eterm Eterm 0.9.2 aterm aterm 1.0.1 aterm aterm 0.4.2 |
| Not Vulnerable: | |
Discussion
Multiple X11 Terminals Missing DISPLAY Variable Local Arbitrary Command Execution Vulnerability
Multiple applications that use X11 are prone to a vulnerability that can allow local attackers to execute arbitrary commands in the context of a user running the application.
This issue affects rxvt 2.6.4 and Eterm 0.9.4; other versions and applications may also be affected.
Multiple applications that use X11 are prone to a vulnerability that can allow local attackers to execute arbitrary commands in the context of a user running the application.
This issue affects rxvt 2.6.4 and Eterm 0.9.4; other versions and applications may also be affected.
Exploit / POC
Multiple X11 Terminals Missing DISPLAY Variable Local Arbitrary Command Execution Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Multiple X11 Terminals Missing DISPLAY Variable Local Arbitrary Command Execution Vulnerability
Solution:
Please see the referenced advisories for details on obtaining and applying the appropriate updates.
MandrakeSoft Corporate Server 3.0 x86_64
MandrakeSoft Corporate Server 3.0
Solution:
Please see the referenced advisories for details on obtaining and applying the appropriate updates.
MandrakeSoft Corporate Server 3.0 x86_64
-
Mandriva aterm-0.4.2-3.1.C30mdk.x86_64.rpm
http://www.mandriva.com/en/download/
MandrakeSoft Corporate Server 3.0
-
Mandriva aterm-0.4.2-3.1.C30mdk.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva Eterm-0.9.2-3.1.C30mdk.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva Eterm-devel-0.9.2-3.1.C30mdk.i586.rpm
http://www.mandriva.com/en/download/
References
Multiple X11 Terminals Missing DISPLAY Variable Local Arbitrary Command Execution Vulnerability
References:
References:
- Attack vector exploiting rxvt defaulting to :0 (Bernhard R. Link)
- Debian Bug report logs - #473127 eterm: opens window on unspecified display (Bernhard R. Link)
- X.Org Homepage (X.Org)