PT-2006-1206 · Rxvt Unicode · Rxvt-Unicode

Publicado 2006-01-09 · Atualizado 2011-03-08 · CVE-2006-0126

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: rxvt-unicode versions prior to 6.3

Description: The issue allows local users to gain read and write access to tty devices due to the failure to maintain intended permissions on certain platforms, including Linux and most BSD platforms, that use openpty and non-Unix pty devices.

Recommendations: For versions prior to 6.3, update to version 6.3 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2006-0126

Produtos afetados

Rxvt-Unicode

Referências · 8

• http://vupen.com/english/advisories/2006/0052 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0126 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-0126 · Aviso do Fabricante
• http://dist.schmorp.de/rxvt-unicode/Changes · Nota
• https://security-tracker.debian.org/tracker/CVE-2006-0126 · Aviso do Fabricante
• http://secunia.com/advisories/18301 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2006-0126 · Aviso do Fabricante
• http://osvdb.org/22223 · Correção