PT-2006-1206 · Rxvt Unicode · Rxvt-Unicode

Published 2006-01-09 · Updated 2011-03-08 · CVE-2006-0126

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: rxvt-unicode versions prior to 6.3

Description: The issue allows local users to gain read and write access to tty devices due to the failure to maintain intended permissions on certain platforms, including Linux and most BSD platforms, that use openpty and non-Unix pty devices.

Recommendations: For versions prior to 6.3, update to version 6.3 or later to resolve the issue.

Fix

Related Identifiers

CVE-2006-0126

Affected Products

Rxvt-Unicode

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2006-0126 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-0126 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2006-0126 · Vendor Advisory
• http://secunia.com/advisories/18301 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2006-0126 · Vendor Advisory
• http://osvdb.org/22223 · Patch
• http://vupen.com/english/advisories/2006/0052 · Note
• http://dist.schmorp.de/rxvt-unicode/Changes · Note