PT-2007-4109 · Red Hat · Xterm+1

Published 2007-08-27 · Updated 2018-10-16 · CVE-2007-2797

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions xterm versions 192-7.el4 through 208-3.1

Description The issue allows local users to write data to other users' terminals due to incorrect group ownership of tty devices set by xterm.

Recommendations For versions 192-7.el4 through 208-3.1, update the package to a version that correctly sets the group ownership of tty devices.

Fix

Related Identifiers

CVE-2007-2797

RHSA-2007:0701

RHSA-2007_0701

Affected Products

Red Hat

Xterm

References · 16

• http://secunia.com/advisories/26562 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-2797 · Security Note
• http://redhat.com/support/errata/RHSA-2007-0701.html · Vendor Advisory
• https://issues.rpath.com/browse/RPL-1396 · Note
• https://access.redhat.com/errata/RHSA-2007:0701 · Note
• https://access.redhat.com/security/cve/CVE-2007-2797 · Note
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=349924 · Note
• http://secunia.com/advisories/27921 · Note
• http://secunia.com/advisories/27617 · Note
• http://securityfocus.com/bid/26710 · Note
• http://securityfocus.com/archive/1/477469/100/0/threaded · Note
• https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=239070 · Note
• http://securityreason.com/securityalert/3066 · Note
• http://support.avaya.com/elmodocs2/security/ASA-2007-490.htm · Note
• http://securityfocus.com/archive/1/477632/100/100/threaded · Note