PT-2005-1156 · Gnome+1 · Libzvt2+3

Paul Szabo · Published 2005-10-05 · Updated 2017-07-11 · CVE-2005-0023

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions gnome-pty-helper in GNOME libzvt2 and libvte4 (affected versions not specified)

Description The issue allows local users to spoof the logon hostname by modifying the DISPLAY environment variable. There is a dispute regarding the severity of this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2005-0023

Affected Products

Debian

Gnome-Pty-Helper

Libvte4

Libzvt2

References · 15

• 🔥 http://securityfocus.com/bid/15004 · Exploit
• 🔥 https://exploit-db.com/exploits/26321 · Exploit
• 🔥 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=330907 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0023 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2005-0023 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-0023 · Vendor Advisory
• http://secunia.com/advisories/17023 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2005-0023 · Vendor Advisory
• https://security-tracker.debian.org/tracker/source-package/vte · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2005-0023 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=112879572407250&w=2 · Note
• http://vupen.com/english/advisories/2005/1931 · Note
• https://packages.debian.org/src:vte · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22496 · Note
• http://bugzilla.gnome.org/show_bug.cgi?id=317312 · Note