1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
|
<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE glsa SYSTEM "http://www.gentoo.org/dtd/glsa.dtd">
<glsa id="200805-03">
<title>Multiple X11 terminals: Local privilege escalation</title>
<synopsis>
A vulnerability was found in aterm, Eterm, Mrxvt, multi-aterm, RXVT,
rxvt-unicode, and wterm, allowing for local privilege escalation.
</synopsis>
<product type="ebuild">aterm eterm rxvt mrxvt multi-aterm wterm rxvt-unicode</product>
<announced>2008-05-07</announced>
<revised count="02">2008-05-10</revised>
<bug>216833</bug>
<bug>217819</bug>
<bug>219746</bug>
<bug>219750</bug>
<bug>219754</bug>
<bug>219760</bug>
<bug>219762</bug>
<access>local</access>
<affected>
<package name="x11-terms/aterm" auto="yes" arch="*">
<unaffected range="ge">1.0.1-r1</unaffected>
<vulnerable range="lt">1.0.1-r1</vulnerable>
</package>
<package name="x11-terms/eterm" auto="yes" arch="*">
<unaffected range="ge">0.9.4-r1</unaffected>
<vulnerable range="lt">0.9.4-r1</vulnerable>
</package>
<package name="x11-terms/mrxvt" auto="yes" arch="*">
<unaffected range="ge">0.5.3-r2</unaffected>
<vulnerable range="lt">0.5.3-r2</vulnerable>
</package>
<package name="x11-terms/multi-aterm" auto="yes" arch="*">
<unaffected range="ge">0.2.1-r1</unaffected>
<vulnerable range="lt">0.2.1-r1</vulnerable>
</package>
<package name="x11-terms/rxvt" auto="yes" arch="*">
<unaffected range="ge">2.7.10-r4</unaffected>
<vulnerable range="lt">2.7.10-r4</vulnerable>
</package>
<package name="x11-terms/rxvt-unicode" auto="yes" arch="*">
<unaffected range="ge">9.02-r1</unaffected>
<vulnerable range="lt">9.02-r1</vulnerable>
</package>
<package name="x11-terms/wterm" auto="yes" arch="*">
<unaffected range="ge">6.2.9-r3</unaffected>
<vulnerable range="lt">6.2.9-r3</vulnerable>
</package>
</affected>
<background>
<p>
Aterm, Eterm, Mrxvt, multi-aterm, RXVT, rxvt-unicode, and wterm are X11
terminal emulators.
</p>
</background>
<description>
<p>
Bernhard R. Link discovered that RXVT opens a terminal on :0 if the
"-display" option is not specified and the DISPLAY environment variable
is not set. Further research by the Gentoo Security Team has shown that
aterm, Eterm, Mrxvt, multi-aterm, rxvt-unicode, and wterm are also
affected.
</p>
</description>
<impact type="normal">
<p>
A local attacker could exploit this vulnerability to hijack X11
terminals of other users.
</p>
</impact>
<workaround>
<p>
There is no known workaround at this time.
</p>
</workaround>
<resolution>
<p>
All aterm users should upgrade to the latest version:
</p>
<code>
# emerge --sync
# emerge --ask --oneshot --verbose ">=x11-terms/aterm-1.0.1-r1"</code>
<p>
All Eterm users should upgrade to the latest version:
</p>
<code>
# emerge --sync
# emerge --ask --oneshot --verbose ">=x11-terms/eterm-0.9.4-r1"</code>
<p>
All Mrxvt users should upgrade to the latest version:
</p>
<code>
# emerge --sync
# emerge --ask --oneshot --verbose ">=x11-terms/mrxvt-0.5.3-r2"</code>
<p>
All multi-aterm users should upgrade to the latest version:
</p>
<code>
# emerge --sync
# emerge --ask --oneshot --verbose ">=x11-terms/multi-aterm-0.2.1-r1"</code>
<p>
All RXVT users should upgrade to the latest version:
</p>
<code>
# emerge --sync
# emerge --ask --oneshot --verbose ">=x11-terms/rxvt-2.7.10-r4"</code>
<p>
All rxvt-unicode users should upgrade to the latest version:
</p>
<code>
# emerge --sync
# emerge --ask --oneshot --verbose ">=x11-terms/rxvt-unicode-9.02-r1"</code>
<p>
All wterm users should upgrade to the latest version:
</p>
<code>
# emerge --sync
# emerge --ask --oneshot --verbose ">=x11-terms/wterm-6.2.9-r3"</code>
</resolution>
<references>
<uri link="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1142">CVE-2008-1142</uri>
<uri link="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1692">CVE-2008-1692</uri>
</references>
<metadata tag="requester" timestamp="2008-04-29T13:00:54Z">
keytoaster
</metadata>
<metadata tag="submitter" timestamp="2008-04-29T13:12:03Z">
keytoaster
</metadata>
<metadata tag="bugReady" timestamp="2008-05-07T18:53:21Z">
keytoaster
</metadata>
</glsa>
|
GitWeb