PT-2009-2834 · Apple+1 · Xterm+2

CVE-2009-0141 · Publicado 2009-02-13 · Atualizado 2024-01-25

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions XTerm in Apple Mac OS X versions 10.4.11 through 10.5.6

Description The issue allows local users to write to the XTerm of another user due to insecure world-writable permissions on tty devices created when XTerm is used with luit.

Recommendations For XTerm in Apple Mac OS X versions 10.4.11 through 10.5.6, consider restricting access to the tty devices created by XTerm when used with luit to prevent unauthorized writing to another user's XTerm.

Correção

Incorrect Permission

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

CVE-2009-0141

Produtos afetados

Macos X

Xterm

Luit

Referências · 8

• http://vupen.com/english/advisories/2009/0422 · Nota
• http://securityfocus.com/bid/33798 · Nota
• http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html · Aviso do Fabricante
• http://secunia.com/advisories/33937 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-0141 · Nota de Segurança
• http://securitytracker.com/alerts/2009/Feb/1021729.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48727 · Nota
• http://support.apple.com/kb/HT3438 · Nota